DKIM header does not comply with DMARC

[Jacques Le Roux]

Hi,

I'm the admin of the Apache OFBiz Nabble forum: http://ofbiz.135035.n4.nabble.com/

Several projects of the Apache Software Foundation (ASF) are also using Nabble as free archives/forums. This is great and we thank you for that!

Recently an Apache OFBiz user, also a Comcast customer, found that he did not receive all messages from the Apache OFBiz user ML, though he is subscribed to this ML http://ofbiz.apache.org/mailing-lists.html

After an investigation with the ASF Infrastructure team, we discovered that this is due to the DMARC policy and DKIM signature check done by Comcast.

The point of DMARC is to validate the DKIM header emanating from the domain listed in the from address of the message headers.

The problem with what Nabble does is that you are setting a DKIM header using your own mailers domain, which differs from the domain in the from address.

So your DKIM header does not comply with DMARC, which is causing us some downstream delivery problems.

Could you check if you can handle this better?

If we not only consider ASF users, the number of Nabble users and the number of readers using Comcast must be a large group of people...

Thanks!

[Franklin <Nabble>]

Please post the DKIM header and from address of an email here.

[Jacques Le Roux]

Hi,

Is this helpful to you?

https://lists.apache.org/api/source.lua/54f21d6cd19a4aa5bb3e38388cd2a8d301af5d0b44e086cf9224e017@%3Cuser.ofbiz.apache.org%3E

https://lists.apache.org/api/source.lua/875d3426030a3b0979314dc95abbaf23723d1f9e452b9a06120aaa50@%3Cuser.ofbiz.apache.org%3E

Thanks

Jacques

Le 26/06/2017 à 01:00, Franklin <Nabble> [via Nabble Support] a écrit :

Please post the DKIM header and from address of an email here.

---

If you reply to this email, your message will be added to the discussion below:

http://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-tp7598182p7598189.html

To unsubscribe from DKIM header does not comply with DMARC, click here.
NAML

[Franklin <Nabble>]

Thanks, I will work on cleaning up some things in Nabble in a few weeks and I will include this.  I will post here when I get to this.

[Jacques Le Roux]

Thank you, looking forward :)

Le 28/06/2017 à 04:30, Franklin <Nabble> [via Nabble Support] a écrit :

Thanks, I will work on cleaning up some things in Nabble in a few weeks and I will include this.  I will post here when I get to this.

---

If you reply to this email, your message will be added to the discussion below:

http://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-tp7598182p7598196.html

To unsubscribe from DKIM header does not comply with DMARC, click here.
NAML

[Franklin <Nabble>]

Our sysadmin says that the DKIM headers have been removed.  Can you please check that everything is okay?

[Jacques Le Roux]

Thanks Franklin,

I'm forwarding a link to the thread to the concerned persons

Cheers

Jacques

Le 10/07/2017 à 23:36, Franklin <Nabble> [via Nabble Support] a écrit :

Our sysadmin says that the DKIM headers have been removed.  Can you please check that everything is okay?

---

If you reply to this email, your message will be added to the discussion below:

http://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-tp7598182p7598242.html

To unsubscribe from DKIM header does not comply with DMARC, click here.
NAML

[Jacques Le Roux]

Hi Franklin,

Since then nobody complained after I asked if it was OK now. So I suppose it's OK, have a good day!