On Tue, Apr 15, 2014 at 08:39:48AM +1200, Brian E Carpenter wrote: > Murray, > > On 15/04/2014 05:26, Murray S. Kucherawy wrote: > ... > > The DMARC proponents did engage mailman. Version 2.1.16 includes support > > for a setting that makes the operation of the list DMARC-friendly, though > > likely in a way some people will find unpalatable. > > Please tell us more about that. >From what I can tell, it has an option which you can replace the From field with the original sender's from field with the mailing list's e-mail address. i.e., instead of: From: Brian E Carpenter <brian.e.carpenter@xxxxxxxxx> it would instead be; From: IETF <ietf@xxxxxxxx> Any SPF or DKIM fields would also get stripped, and the original from field would be moved elsewhere (it's not clear from reading the description whether it's to some other header field, i.e., "X-Original-From" or to the body of the e-mail. The solution I would prefer is one where mailman look up the DMARC record, and if it's p=reject, it could rewrite the email from: From: Brian E Carpenter <brian.e.carpenter@xxxxxxxxx> to something like: From: Brian E Carpenter <brian.e.carpenter@xxxxxxxxx.INVALID> (or maybe instead of yahoo.com.INVALID, it should be "yahoo.com.BREAKS.MAILING.LISTS" :-) - Ted