Opened 8 months ago

Last modified 7 months ago

#3245 new task

lists.osgeo.org should be using TLS/SSL and DKIM

Reported by: robe Owned by: sac-tickets@…
Priority: normal Milestone: Sysadmin Contract 2024-III (strk)
Component: SysAdmin/Postfix Keywords:
Cc:

Description

Someone on gmail is complaining about getting mails delayed by as much as a day from geos mailing list.

Looking at the mail logs, it seems we are being dinged on sending plain text mail. So I suspect any email to an @gmail.com address may be dinged delayed because of this.

The log shows

Your email has been rate limited because DKIM authentication didn't 421-4.7.30 pass for this message. Gmail requires all bulk email senders to 421-4.7.30 authenticate with DKIM. 421-4.7.30  421-4.7.30 

 Your email has been rate limited because this message wasn't sent 421-4.7.29 over a TLS connection. Gmail requires all bulk email senders to use 421-4.7.29 TLS/SSL for SMTP connections

Change History (1)

comment:1 by neteler, 7 months ago

Similar case today on the "grass-translations" mailman list (email bounced to me as the list admin):

  xxxxxx@gmail.com
    (generated from xxxx@zzzz.org)
    host gmail-smtp-in.l.google.com [wwww:bbbb:4004:c1b::1a]
    SMTP error from remote mail server after pipelined end of data:
    550-5.7.26 Your email has been blocked because the sender is unauthenticated.
    550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM.
    550-5.7.26
    550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass
    550-5.7.26  SPF [osgeo.org] with ip: [2001:470:142::13] = did not pass
    550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to
    550 5.7.26  https://support.google.com/mail/answer/81126#authentication af79cd13be357-7acb08c572dsi387238685a.244 - gsmtp
Note: See TracTickets for help on using tickets.