Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (athena.apache.org: domain of me@junc.eu designates
 80.162.68.54 as permitted sender)
From: Benny Pedersen <me@junc.eu>
To: Dave Warren <davew@hireahit.com>, <users@spamassassin.apache.org>
Date: Thu, 12 Feb 2015 21:15:05 +0100
Message-ID: <14b7f6e3928.28c1.d475fad7b14312f5d8424e35e39f7512@junc.eu>
In-Reply-To: <54DCFC16.3010301@hireahit.com>
References: 
 <CA+AKB6EJA8C=wB0fSgG_bFn5PndUeNrOzP+_Oo=1VjTTRDq32g@mail.gmail.com>
 <54DCFC16.3010301@hireahit.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:24.0) Gecko/20100101 Thunderbird/24.6.0 AquaMail/1.5.1.13 (build:
 21020013)
Subject: Re: SPF rules do not look at spoofed From: address
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"; format=flowed
Content-Transfer-Encoding: 8bit

On 12. feb. 2015 20.17.44 Dave Warren <davew@hireahit.com> wrote:

> However, using a DMARC "quarantine" or "reject" policy causes breakage
> when users attempt to participate in discussion based mailing lists, or
> other systems which modify messages (adding subject tags, adding
> footers, removing existing signatures), so DMARC quarantine or reject
> policies are only really useful for domains which send mail in
> predictable and largely automated ways, which are frequently forged,
> with live users living at another domain for their own mailboxes.

if the maillist preserve dkim signed mails, then dmarc will pass, but yes 
sadly there is maillists that breaks dkim, this is not a design fault, but 
only a admin miss understanding that its not maillist server admins faults, 
but it is

spf is transperent to maillist, and since dkim have no ip at all it will be 
aswell if not breaked

mailman have support for take over ownerships of users dkim signed mails, 
but it will create more problems then it solves, since not many mua clients 
then know how to reply to maillist or to the origin sender to make a 
private mail

thanks to this maillist here its not a problem here, i get dmarc pass, super

note dmarc can break on spf if maillist is not spf protected, but the 
origin sender was