<div dir="ltr">Hi Ira,<div><br></div><div>When I check your message from <a href="http://speedy.net">speedy.net</a> mail (powered by Google), I receive the following messages:</div><div><br></div><div>SPF: PASS with IP 132.65.116.210 Learn more<br>DKIM: 'FAIL' with domain <a href="http://ira.abramov.org">ira.abramov.org</a> Learn more<br>DMARC: 'FAIL' Learn more</div><div><br></div><div>I suggest that you use/create a Gmail account, send yourself mail the way you usually send it and check the headers from there. For example if I check a mail I receive from my server (sent automatically), I receive the following messages:</div><div><br></div><div>SPF: PASS with IP 69.169.224.10 Learn more<br>DKIM: 'PASS' with domain <a href="http://amazonses.com">amazonses.com</a> Learn more</div><div><br></div><div>You may consider sending your mail via an external email provider, such as Amazon SES. I use them and they are very reliable.</div><div><br></div><div>Thanks,<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="direction:rtl"><div style="direction:rtl">אורי</div><div style="direction:rtl"><a href="mailto:uri@speedy.net" target="_blank">uri@speedy.net</a></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 23, 2021 at 4:01 PM Ira Linux Abramov <<a href="mailto:Lists-Linux-IL@ira.abramov.org">Lists-Linux-IL@ira.abramov.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hey gang,<br>
<br>
I have added SPF record for my domains about 2 years ago and kinda <br>
forgot about it. I get a lot of reports about spam received "from my <br>
domain" but not from my servers. almost 50% from google, and I assume <br>
that's because half the world in on gmail...<br>
<br>
however today I found a report from an Israeli domain for the first <br>
time, the OpenU server sent me the following report and I'm not happy <br>
about what I am reading here. if I read it correctly, someone at <br>
<a href="http://openu.ac.il" rel="noreferrer" target="_blank">openu.ac.il</a> got an email I sent through this list but it is rejected <br>
because the DKIM is broken. If that is true there is something wrong <br>
with the way the huji mail server is adding the sig at the bottom, or <br>
something else is breaking the message, which suggests using SPF records <br>
may be more harmful than helpful, plus the huji server is not configured <br>
correctly to prevent DKIM breakage.<br>
<br>
Anyone got insights?<br>
<br>
<?xml version="1.0" encoding="UTF-8" ?><br>
<feedback><br>
<version>1.0</version><br>
<report_metadata><br>
<org_name><a href="http://openu.ac.il" rel="noreferrer" target="_blank">openu.ac.il</a></org_name><br>
<email><a href="mailto:MAILER-DAEMON@openu.ac.il" target="_blank">MAILER-DAEMON@openu.ac.il</a></email><br>
<extra_contact_info></extra_contact_info><br>
<report_id>8e1971$6c419ec=<a href="mailto:9144b8f82252374d@openu.ac.il" target="_blank">9144b8f82252374d@openu.ac.il</a></report_id><br>
<date_range><br>
<begin>1640124003</begin><br>
<end>1640210403</end><br>
</date_range><br>
</report_metadata><br>
<policy_published><br>
<domain><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></domain><br>
<adkim>r</adkim><br>
<aspf>r</aspf><br>
<p>none</p><br>
<sp></sp><br>
<pct>100</pct><br>
</policy_published><br>
<record><br>
<row><br>
<source_ip>132.65.116.210</source_ip><br>
<count>1</count><br>
<policy_evaluated><br>
<disposition>none</disposition><br>
<dkim>fail</dkim><br>
<spf>fail</spf><br>
</policy_evaluated><br>
</row><br>
<identifiers><br>
<header_from><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></header_from><br>
<envelope_from><a href="http://cs.huji.ac.il" rel="noreferrer" target="_blank">cs.huji.ac.il</a></envelope_from><br>
</identifiers><br>
<auth_results><br>
<dkim><br>
<domain><a href="http://ira.abramov.org" rel="noreferrer" target="_blank">ira.abramov.org</a></domain><br>
<selector>dkim</selector><br>
<result>permerror</result><br>
</dkim><br>
<spf><br>
<domain><a href="http://cs.huji.ac.il" rel="noreferrer" target="_blank">cs.huji.ac.il</a></domain><br>
<scope>mfrom</scope><br>
<result>none</result><br>
</spf><br>
</auth_results><br>
</record><br>
</feedback><br>
<br>
_______________________________________________<br>
Linux-il mailing list<br>
<a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a><br>
<a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" rel="noreferrer" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
</blockquote></div>