heidelberg-makerspace / dai-makerspace-do-something

Issue tracker for tasks you could do in the DAI Makerspace
5 stars 0 forks source link

Gmail blocks some mailman messages #111

Open LukasFreeze opened 7 years ago

LukasFreeze commented 7 years ago

With more users in our various mailing lists fewer and fewer messages are falsely classified as "spam", but a major problem persists: Gmail blocks some eMails that it considers suspicious entirely and the addressees can not see them or teach it that it was not in fact spam.

It's likely that I have provoked this when switching all previous newsletter subscribers to the new list, but adhering to Gmail's bulk sender guidelines more closely might solve this issue.

LukasFreeze commented 7 years ago

It starts with "authentication & identification": as far as I know, we do have consistent "from:" addresses but several IPs from which Mailman will send. The third advice is to "Keep valid reverse DNS records for the IP address(es) from which you send mail, pointing to your domain" which is not entirely clear to me yet.

emka commented 7 years ago

We have correct reverse DNS entries for IPv4 and IPv6.

What we do not have is SPF and DMARC records, if anyone knows these well enough please contact me.

emka commented 7 years ago

I think our SPF record should look like this:

v=spf1 ip4:78.47.161.102 ip6:2a01:4f8:c17:1e51::2 -all

Can anyone confirm?

LukasFreeze commented 7 years ago

I don't have any experience of course, but from the Google support page I understand it should rather be

v=spf1 include:_spf.google.com ip4:78.47.161.102 ip6:2a01:4f8:c17:1e51::2 ~all

They say "-all" may cause delivery problems.

emka commented 7 years ago

_spf.google.com is for sites hosted on Google servers. I added

v=spf1 ip4:78.47.161.102 ip6:2a01:4f8:c17:1e51::2 ~all

please let me know if anything fails.

emka commented 7 years ago

We are also missing valid DKIM signatures, probably not solved yet for mailman.