[sending without dkim signing]
On 4/11/26 03:56, Aaron Carson via OvmsDev wrote:
Unsolicited advice: if you’re rewriting the DKIM signatures, is it also rewriting the From header to use a @lists.open… domain too? I only ask as your email has come from your email address, and the re-signed DKIM won’t match for anyone that has DKIM/DMARC/SPF enforced on their do
This is my understanding as well. In theory I believe a mailing list can change some headers but I was never able to get that to work so I a simple (non-mailman) list I have replaces the from header, appended is what I do and it results in something like:
From: "'Craig Leres' via Fnord Mailing list" <fnord@example.com>
In mailman2 I think the setting is "from_is_list":
Replace the From: header address with the list's posting address
to mitigate issues stemming from the original From: domain's
DMARC or similar policies.
I'm guessing mailman3 has the same or at least a similar knob. Looks like I use "munge from" but I imagine "wrap message" would work just as well.
Craig
formail < ${t1}
-R From: Original-From:
-A "From: ${from}"
-i "To: ${what} <${list}>"
-I Cc
-I Authentication-Results
-I DKIM-Signature
-I DMARC-Filter
-I Message-Id
-I Received
-I Return-Path
-I X-AuditID
-I X-Authentication-Warning
-I X-Bogosity
-I X-Virus-Scanned
-I X-Virus-Status |
sendmail -f${list} members