[RndTbl] Gmail spam filtering super-aggressive lately

Tue Mar 31 08:52:43 CDT 2020

All of my spam-flagged messages from yesterday (by gmail) were from Alberto.

Seems like DKIM / DMARC are broken for that abrao.net? It says "body 
hash did not verify" but the TXT records appear to be valid. I can't 
check to see if the MTA setting is in sync with the DNS setting though.

ADFU+vuiyzDwRpJrzhLhiV5URaWa3Oobj0hTvE81swYwSfFbPkrqL9kKUdZnqetPeeY+mHVffE+3
X-Received: by 2002:a02:9a18:: with SMTP id 
b24mr14693132jal.110.1585632847649;
         Mon, 30 Mar 2020 22:34:07 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1585632847; cv=none;
         d=google.com; s=arc-20160816;
b=Zado7q0sScF+5IU1dqiC9EFpVoV72uP6cb/IueHD1Fc4xa4cm7s4Bh8pyFHIedm2aX
mSMQy2u4baxl0kxYwWpR1am1R73wD+th/aBJpPHbTDNeoBLy9T6qI2VtYSX/q/Ks8idn
js8lhiywS08NbQEkEUrmcMMqNnGe8Xt8QLQA9ssgStByut2ry5khajvphjbNaZGyScq0
ijHdvZ0qxbc0lnKirypHSyY/Z48uqUJ2jKPu8pWxvrgNQtI27aQuWPogdHILYygGlU9r
CKln0BJ+P1V9KA+gcmzH06ah9I5gVis1LWsMqOgMJwpLGCGwJbzw8BCwfI/mjqA6VXTC
          SJWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; 
d=google.com; s=arc-20160816;
h=sender:errors-to:content-transfer-encoding:reply-to:list-subscribe
          :list-help:list-post:list-archive:list-unsubscribe:list-id
:precedence:subject:content-language:in-reply-to:mime-version:date
          :message-id:references:to:from:dkim-signature;
         bh=oidrPMRbCLmiRjW63AagbwfVKumSw9oODcPZ+bJRVDY=;
b=E4L7LPClJUlZQ5EC9adhbUbRsIwwFBsa2aNxtcXwk6P+KYQvDRNPI1IGNG7lfqEoTg
oZITXenF3j2l9EO4bN4GEFTRu6uHHyzYSD3lxj515+N5YdyNYq4uvKFcB32kDoMY8d6t
AU+KAqPk/tD9ckdfAzBMBI3bFm0ORxrEWDjfwSdRXzi2/GqtwIjjqWs1uQVn6YUGNWwC
y/Poq200sqKioAVBD6CyImVqRlpu0hdawl4ep90hCGXkiUh6Cxn49Kh2RbJPNlbY2AUH
+vfwBO2U+ALv3hPsmtlh9RiJrYybuq2/V9v20hPpfXEDBWpsQa3Mv/WOdxlXvxPhVhWv
          Nw5Q==
ARC-Authentication-Results: i=1; mx.google.com;
        dkim=neutral (body hash did not verify) header.i=@abrao.net 
header.s=20200203 header.b=eM3lj8iw;
        spf=pass (google.com: best guess record for domain of 
roundtable-bounces at muug.ca designates 2605:e200:3:4::244 as permitted 
sender) smtp.mailfrom=roundtable-bounces at muug.ca;
        dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=abrao.net
Return-Path: <roundtable-bounces at muug.ca>
Received: from muug.ca (muug.ca. [2605:e200:3:4::244])
         by mx.google.com with ESMTPS id 
r76si11367775jac.115.2020.03.30.22.34.07
         for <scott at 100percenthelpdesk.com>
         (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
         Mon, 30 Mar 2020 22:34:07 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of 
roundtable-bounces at muug.ca designates 2605:e200:3:4::244 as permitted 
sender) client-ip=2605:e200:3:4::244;
Authentication-Results: mx.google.com;
        dkim=neutral (body hash did not verify) header.i=@abrao.net 
header.s=20200203 header.b=eM3lj8iw;
        spf=pass (google.com: best guess record for domain of 
roundtable-bounces at muug.ca designates 2605:e200:3:4::244 as permitted 
sender) smtp.mailfrom=roundtable-bounces at muug.ca;
        dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=abrao.net
Received: from muug.ca (localhost [127.0.0.1]) by muug.ca 
(8.15.2/8.15.2/Debian-14~deb10u1) with ESMTP id 02V5Y6ed002196; Tue, 31 
Mar 2020 00:34:07 -0500
Received: from mail.abrao.net (abiha.abrao.net [184.67.182.250]) by 
muug.ca (8.15.2/8.15.2/Debian-14~deb10u1) with ESMTP id 02V5Y1at001968 
for <roundtable at muug.ca>; Tue, 31 Mar 2020 00:34:04 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=abrao.net; 
s=20200203;
   t=1585632836; h=from:from:sender:reply-to:subject:subject:date:date: 
message-id:message-id:to:to:cc:mime-version:mime-version: 
content-type:content-type: 
content-transfer-encoding:content-transfer-encoding: 
in-reply-to:in-reply-to:references:references; 
bh=c4ZdddDvQqm6pzFiBJQ3rqWRVosL/6OdU+FZ5YcYb/Y=; 
b=eM3lj8iwWHCR5sdGh7QD7i1h5IpxvjkAAwRzwc0HB2RFX88uTurNAH+bLI4CW/l8BK2NMc 
g+mOYpQtyLc8uQKd/9A9fL88N+Y2wUYVSo4tRG4p0d3DarP9FkepJDusta2M3Ey5oTE5+b 
BPYM9I+b/6QHGewGc3pp9zmu7IGWnDvvz0c/v81pofHFSnNTNQ54JyLNF3hPelu67ACa/d 
sFTWwo9qHoimqdXf1po1dUXb3be3wbKncvkG6yIfuSzAxRxl4Eq0B1dMiQFKLq2o1eePhI 
ScUQMLCJ3Ma05pma71oGl+vRVwMGZsuu0GfgPIUEqaP2VZZ/pRQs79sddza+Wg==
From: Alberto Abrao <alberto at abrao.net>
To: Continuation of Round Table discussion <roundtable at muug.ca>
References: <a0273605-e22a-fd1d-4b40-9fe5717481bd at abrao.net> 
<20200330170424.04a129a3 at pog.tecnopolis.ca> 
<168980b5-05bf-0d84-9983-64492c989bf9 at abrao.net> 
<20200330230613.51cdb0f3 at pog.tecnopolis.ca> 
<94e07f2f-f906-cf1b-0743-538fe90edcca at abrao.net>
Message-ID: <53d665c5-c798-2fe3-e479-3bdef9c8ee5f at abrao.net>
Date: Tue, 31 Mar 2020 00:33:55 -0500
MIME-Version: 1.0
In-Reply-To: <94e07f2f-f906-cf1b-0743-538fe90edcca at abrao.net>
Content-Language: en-US
X-Greylist: inspected by milter-greylist-4.5.11 (muug.ca [127.0.0.1]); 
Tue, 31 Mar 2020 00:34:07 -0500 (CDT) for IP:'127.0.0.1' 
DOMAIN:'localhost' HELO:'muug.ca' FROM:'roundtable-bounces at muug.ca' RCPT:''
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.11 
(muug.ca [127.0.0.1]); Tue, 31 Mar 2020 00:34:07 -0500 (CDT)
X-Greylist: inspected by milter-greylist-4.5.11 (muug.ca 
[208.81.1.244]); Tue, 31 Mar 2020 00:34:04 -0500 (CDT) for 
IP:'184.67.182.250' DOMAIN:'abiha.abrao.net' HELO:'mail.abrao.net' 
FROM:'alberto at abrao.net' RCPT:''
X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by 
milter-greylist-4.5.11 (muug.ca [208.81.1.244]); Tue, 31 Mar 2020 
00:34:04 -0500 (CDT)
X-Spam-Status: No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, 
DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=unavailable 
autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on muug.ca
X-Virus-Scanned: clamav-milter 0.102.1 at muug
X-Virus-Status: Clean
Subject: Re: [RndTbl] Main firewall / router for public facing subnet
X-BeenThere: roundtable at muug.ca
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Continuation of Round Table discussion <roundtable.muug.ca>
List-Unsubscribe: <https://muug.ca/mailman/options/roundtable>, 
<mailto:roundtable-request at muug.ca?subject=unsubscribe>
List-Archive: <http://muug.ca/pipermail/roundtable/>
List-Post: <mailto:roundtable at muug.ca>
List-Help: <mailto:roundtable-request at muug.ca?subject=help>
List-Subscribe: <https://muug.ca/mailman/listinfo/roundtable>, 
<mailto:roundtable-request at muug.ca?subject=subscribe>
Reply-To: Continuation of Round Table discussion <roundtable at muug.ca>
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: roundtable-bounces at muug.ca
Sender: Roundtable <roundtable-bounces at muug.ca>

On 2020-03-31 12:58 a.m., Hartmut W Sager wrote:
> Oh, and all 4 of Alberto's postings of the last 18 hours "reliably" 
> went to my Gmail spam.  :(
>
> Hartmut W Sager - Tel +1-204-339-8331
>
>
> On Tue, 31 Mar 2020 at 00:55, Hartmut W Sager <hwsager at marityme.net 
> <mailto:hwsager at marityme.net>> wrote:
>
>     > If I tell mailman to send me a copy too,
>     > then I'll always get 2 copies.
>
>     Except if you're using Gmail as your infrastructure (like I am). 
>     Gmail only posts the message once when it recognizes the unique
>     Message-ID as duplicated, even if the multiple messages come into
>     "To" and/or "cc" via different target e-mail addresses (which is
>     often my case).
>
>     I hate to make Gmail look good, especially when I started this
>     "bash Gmail" thread, but hey, they do a few things right.  (Like
>     labels!)
>
>     Hartmut W Sager - Tel +1-204-339-8331
>
>
>     On Mon, 30 Mar 2020 at 23:18, Trevor Cordes <trevor at tecnopolis.ca
>     <mailto:trevor at tecnopolis.ca>> wrote:
>
>         Oh, I see why the mailing lists sometimes default to replying
>         to the
>         list and sometimes to the sender... if I'm in the To:/Cc:
>         explicitly
>         then when I hit reply it goes just to the sender.  If I'm not,
>         it goes
>         to the list.  Ah: because the ones explicitly to me are not
>         even going
>         through mailman (even though mailman is on the Cc:). I think
>         there's a
>         setting in each subscriber's mailman to also (or not) send a
>         copy when
>         you're already on the Cc:.
>
>         A bit frustrating as there's no good solution.  If I tell
>         mailman to
>         send me a copy too, then I'll always get 2 copies. And I can't
>         tell
>         the origin mail server not to send me that other copy...
>         Unless someone
>         can think of something I haven't, looks like using reply-to-all or
>         reply-to-sender explicitly each time, and never using just
>         "reply", is
>         the only way to ensure the MUA is doing what I want.
>
>         Or... I guess if everyone refrains from ever letting any
>         individual
>         person's email address get into the To:'s and Cc:'s that mailman
>         sees... good luck with that!
>         _______________________________________________
>         Roundtable mailing list
>         Roundtable at muug.ca <mailto:Roundtable at muug.ca>
>         https://muug.ca/mailman/listinfo/roundtable
>
>
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.ca
> https://muug.ca/mailman/listinfo/roundtable

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://muug.ca/pipermail/roundtable/attachments/20200331/6b045eed/attachment-0001.htm>