Ever since I moved the 44net mailing list from 'hamradio' to 'mailman'
it's been running into spam filters.
This is caused in part by the fact that 'mailman' is actually an
alternate (duplicate A record) name for 44.0.0.1. The machine serving
as 'mailman' is itself dual-homed to both 169.228.34.84 and 44.0.0.1
but uses 169.228.34.84 as its outgoing email IP address, and I can't
change that. And UCSD blocks inbound SMTP to 169.228.34.84 as part of
THEIR spam filtering.
Another part of it was that the mailer on amprgw was identifying itself
as 'gw.ampr.org' instead of 'amprgw.ucsd.edu' which is its name when
looked up by the outgoing mail IP address of 169.228.34.84. This was
tripping spam filters which believed that the mail was coming from a
forged address.
Among other people, Marius wasn't getting 44net mail because of his site's
spam filtering objecting to the misidentification of amprgw's mailer.
I've corrected the mailer name issue; it now identifies itself on
incoming and outgoing mail as 'amprgw.ucsd.edu' which is its primary
name in the DNS. Mail to it as 'amprgw.ucsd.edu', 'amprgw.ampr.org',
'gw.ampr.org', or 'mailman.ampr.org' will all be accepted. (Although
mail
to
amprgw.ucsd.edu will be processed by UCSD's spam filters. Arrgh.) Mail
from it will come from a connection from 'amprgw.ucsd.edu'. This may
result in the need to adjust a few spam filters but will make other spam
filters happy.
The mailing list sender address will still be 'mailman.ampr.org'. I have
updated the SPF record for that hostname to include all the MXs for it,
and both addresses of it (169.228.34.84 and 44.0.0.1):
"v=spf1 +mx +a ip4:169.228.34.84/32 ip4:44.0.0.0/24 ?all"
With any sort of luck, this will appease the other spam filters.
The reason for all this complication is that I've had to condense two
machines, hamradio and amprgw, into one because hamradio is going away.
The reason for using 'mailman' as the hostname in the mailing list headers
is that we may someday move the mailing lists to their own machine with
that name (and it's own IP address!) and I don't want to go through the
pain of renaming the mailing list once again and having everybody have
to change their filters and address books again.
So if you encounter difficulties with the mailing list I apologize for
the confusion. If this is the first message you've received since the
list moved, then I've fixed your problem. If you find this message in
your spam mailbox, then I've broken it for you.
The basic problem is that there is no good solution for getting rid
of spam. SPF is incomplete and DKIM is just broken itself because it breaks
years-old tradition of mailing list formats. (It checks the Author address
['From:'] instead of the sender ['Sender:'] or error-return address
['MAIL FROM:' or 'From '] address.)
So people, including myself, resort to kludges of various kinds, all
of which are not fully satisfactory, and some mail just doesn't get
delivered.
It's a mess. Sorry.
- Brian