[opendmarc-users] i hate opendmarc

[Benny Pedersen]

On 2016-08-08 23:29, Juri Haberland wrote:

> Correct.

X-Spamd-Result: default: False [-2.74 / 15.00]
  BAYES_HAM(-2.99)[99.90%]
  FORGED_SENDER_MAILLIST(0.00)[]
  RCVD_IN_DNSWL_NONE(0.00)[]
  FORGED_RECIPIENTS_MAILLIST(0.00)[]
  MAILLIST(-0.20)[mailman]
  R_SPF_ALLOW(-0.20)[mx]
  R_DKIM_REJECT(1.00)[sapienti-sat.org]
  DMARC_POLICY_ALLOW(-0.25)[sapienti-sat.org]
  MIME_GOOD(-0.10)[text/plain]
  FORGED_SENDER_FORWARDING(0.00)[]
X-Rspamd-Server: 127.0.0.1
X-Rspamd-Scan-Time: 4.38
X-Rspamd-Queue-ID: 1BA2C1BE1FC

opendkim and opendmarc is not the only players any longer, good to see 
that it will be resolved in opendmarc hopefully, but the underlaying 
problem is that dkim is not yet maillist safe

in rspamd i will try to make protection on maillists that break dkim and 
dmarc, note here if i used opendkim reject it would not recieve that 
maillist mail since maillist breaked dkim signing, sadly

realfix would be to make opendkim know maillists and then try reduce 
signing so it does not break, possible disable body signing ?, and 
disable subject header signing ?

would that work ?