ietf
[Top] [All Lists]

Re: DMARC and yahoo

2014-04-20 11:53:25


Jeffrey Altman


On Apr 15, 2014, at 10:38 PM, Theodore Ts'o <tytso(_at_)mit(_dot_)edu> wrote:

On Tue, Apr 15, 2014 at 10:23:22PM -0400, Michael Richardson wrote:
So, as a WG chair, a person known to me just tried to post to the list
From a brand new yahoo.com mail account.  They aren't subscribed with that
address.  I would normally just approve, and add them...

It seems to me that I must now actually reject, because it would affect other
subscribers.

I'm now thinking that we need to remove all the @yahoo.com addresses from
posting to ietf mailing lists.

So on my mailman configuration (which I believe is the default), if
alice(_at_)hotmail(_dot_)com receives 5 hard fail bounces she will get
automatically suspended from the mailing list.  So a single e-mail
from a @yahoo.com address won't cause damage, and if seven days go by
without any further bounce messages, the "bounce counter" gets reset
to zero.  The problem comes if you have many e-mail messages from
yahoo.com users (which according to yahoo and the DMARC cheerleaders,
shouldn't happen happen, because mailing list traffic is
"insignificant" :-).

I took a different approach.  I left the bounce detection on but switched all 
@yahoo.com accounts to digest mode.  Since the mail now comes from the list 
instead of the @yahoo.com sender there are no rejections.   Not a perfect 
solution but it prevents harm to non-(_at_)yahoo(_dot_)com list participants.

Jeffrey Altman

<Prev in Thread] Current Thread [Next in Thread>