[At-Large] (no subject)

[David Closson]

Greetings all,

ICANN IT Operations can indeed implement the DMARC “fix ups" for our mailman system.
We were waiting to test a vendor provided backport (changes from a newer version) patch for our mailman system.

We have completed testing as of this morning and plan schedule the change for this weekend.

The change will be almost transparent with exception to senders from domains with strict reject DMARC policies.
In this case, the “from:” will be replaced with the list address and we will insert a “reply-to:” header with the senders address.

Our testing indicates this is working flawlessly with the vendor patch.

The lac-discuss-en at atlarge-lists.icann.org and lac-discuss-es at atlarge-lists.icann.org cannot have this “fix up” enabled until the translation email parser is modified to look at the "reply-to” header when a DMARC sender “fix-up” is applied.  The code change may take a few more weeks.





--
David Closson
Director of IT Operations, ICANN
12025 Waterfront Dr. Suite 300
Los Angeles, CA 90094
Office: +1-310-578-8670
Cell: +1-213-270-3866
--








-----Original Message-----
From: "John R. Levine" <johnl at iecc.com>
Date: Friday, October 23, 2015 at 11:54 AM
To: Dev Anand Teelucksingh <devtee at gmail.com>
Cc: "david.closson" <david.closson at icann.org>, "at-large at atlarge-lists.icann.org" <at-large at atlarge-lists.icann.org>
Subject: Re: [At-Large] (no subject)

>> Perhaps the issue can be raised at a future At-Large Technology
>> Taskforce call. I've added this issue to the
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__community.icann.org_display_atlarge_At-2DLarge-2BTechnology-2BIssues&d=BQIBAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=d1qM78bPpnwgvH3iEZtXN8K5Sa-TH91ANMED_67PRwE&m=QmHS-XNIWr6k_f2KBMus0PvhZmwY25NcaxfwTXEY_co&s=YqPPeCxDG34xb_LXdLqr09ftkxF1iiZddWlRYtqsyhs&e= 
>> page
>
>Sorry, I'm overcommitted already and have no time.  In the very short 
>term, the only plausible way to work around DMARC damage is to upgrade to 
>mailman 3.x and use some of their rewriting hacks.  They make the lists 
>work worse since you can't tell who each message is from, but at least 
>they get deliivered.
>
>In the longer run, this week the same people who brought us DMARC have an 
>add-on called ARC that, assuming it works like it should, should mitigate 
>much of the DMARC damage and let people resume running lists the way they 
>always have.
>
>>
>> Dev Anand
>>
>> On Thu, Oct 22, 2015 at 2:26 PM, David Closson <david.closson at icann.org> wrote:
>>> Thanks John.
>>>
>>> We can discuss off-list if you would like.
>>>
>>> Yes, I was attempting to avoid an email discussion regarding DMARC but we already have a upgrade planned to our mailman system since some DMARC support is a necessity moving forward.
>>>
>>>
>>>
>>>
>>>
>>>
>>> --
>>> David Closson
>>> Director of IT Operations, ICANN
>>> 12025 Waterfront Dr. Suite 300
>>> Los Angeles, CA 90094
>>> Office: +1-310-578-8670
>>> Cell: +1-213-270-3866
>>> --
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> -----Original Message-----
>>> From: "John R. Levine" <johnl at iecc.com>
>>> Date: Thursday, October 22, 2015 at 10:54 AM
>>> To: "david.closson" <david.closson at icann.org>
>>> Cc: Olivier MJ Crepin-Leblond <ocl at gih.com>, "at-large at atlarge-lists.icann.org" <at-large at atlarge-lists.icann.org>
>>> Subject: Re: [At-Large] (no subject)
>>>
>>>>> We are working to provide a solution to this problem as quickly as possible.
>>>>> We will update Valentina Pavel (ICANN IT support case holder) who can in turn advise the Atlarge stakeholders.
>>>>
>>>> It's actually called DMARC, and I can report there is some work in
>>>> progress to fix it at the group that caused the DMARC problems in the
>>>> first place.
>>>>
>>>> R's,
>>>> John
>>> _______________________________________________
>>> At-Large mailing list
>>> At-Large at atlarge-lists.icann.org
>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__atlarge-2Dlists.icann.org_mailman_listinfo_at-2Dlarge&d=BQIBAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=d1qM78bPpnwgvH3iEZtXN8K5Sa-TH91ANMED_67PRwE&m=QmHS-XNIWr6k_f2KBMus0PvhZmwY25NcaxfwTXEY_co&s=A6eCKPeGabmAS3MW6PNhecameJoOW1QmAfUasjEebkg&e= 
>>>
>>> At-Large Official Site: https://urldefense.proofpoint.com/v2/url?u=http-3A__atlarge.icann.org&d=BQIBAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=d1qM78bPpnwgvH3iEZtXN8K5Sa-TH91ANMED_67PRwE&m=QmHS-XNIWr6k_f2KBMus0PvhZmwY25NcaxfwTXEY_co&s=m-pBWS_0IXzrFZ1t2cEmBnvGbHJrTp3neJvwV01syqY&e= 
>>