Fwd: Undeliverable: Re: tcp mss clamping or ... ?
Anyone else getting these bounces -- looks like a misconfiguration somewhere? -------- Original Message -------- Subject: Undeliverable: Re: tcp mss clamping or ... ? Date: Tue, 29 Nov 2022 20:09:28 +0000 From: <postmaster@outlook.com> To: <suse@tlinx.org> References: <6385568C.6040308@tlinx.org> <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q@mail.gmail.com> <638666DD.4020000@tlinx.org> *Delivery has failed to these recipients or groups:* amdlnx60@googlemail.com <mailto:amdlnx60@googlemail.com> Your message wasn't delivered because the recipient's email provider rejected it. *Diagnostic information for administrators:* Generating server: GV1P251MB0793.EURP251.PROD.OUTLOOK.COM amdlnx60@googlemail.com Remote Server returned '550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' Original message headers: Received: from DB9P251MB0545.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:336::16) by GV1P251MB0793.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:50::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5834.15; Tue, 29 Nov 2022 20:09:26 +0000 Resent-From: <ppapen@hotmail.de> Received: from DB9P251MB0545.EURP251.PROD.OUTLOOK.COM ([::1]) by DB9P251MB0545.EURP251.PROD.OUTLOOK.COM ([fe80::278b:12f7:6b32:45dd%9]) with Microsoft SMTP Server id 15.20.5857.023; Tue, 29 Nov 2022 20:09:26 +0000 Authentication-Results: spf=pass (sender IP is 195.135.221.145) smtp.mailfrom=lists.opensuse.org; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=tlinx.org; Received-SPF: Pass (protection.outlook.com: domain of lists.opensuse.org designates 195.135.221.145 as permitted sender) receiver=protection.outlook.com; client-ip=195.135.221.145; helo=anna.opensuse.org; pr=C X-IncomingTopHeaderMarker: OriginalChecksum:B690860E3801DD1AABD7FDBE95586F50F5F0CC41A7D78CB4263EAE5C9DCC9896;UpperCasedChecksum:A718C217E7D5BF699F6077A0C83DC8C068CFCFCE4C5C1C5F2EF76F46998EC458;SizeAsReceived:3299;Count:36 X-Spam-Checker-Version: SpamAssassin 3.4.5 (2021-03-20) on mx1.infra.opensuse.org X-Spam-Level: X-Spam-Status: No, score=-5.0 required=5.0 tests=RCVD_IN_DNSWL_HI, RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_NONE,URIBL_DBL_BLOCKED_OPENDNS, URIBL_ZEN_BLOCKED_OPENDNS autolearn=disabled version=3.4.5 X-Spam-Virus: No Message-ID: <638666DD.4020000@tlinx.org> Date: Tue, 29 Nov 2022 12:09:01 -0800 From: L A Walsh <suse@tlinx.org> User-Agent: Thunderbird MIME-Version: 1.0 To: Erwin Van de Velde <erwin.vandevelde@gmail.com> Subject: Re: tcp mss clamping or ... ? References: <6385568C.6040308@tlinx.org> <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q@mail.gmail.com> In-Reply-To: <CAMRG9HjAtDrBf9qN_o+8ZF_wEVXatuF0jFdRsL2=6Jqq4H+a7Q@mail.gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Message-ID-Hash: FJHSAAV5NKVRS4TSSZDY46BKEZDH7HIG X-Message-ID-Hash: FJHSAAV5NKVRS4TSSZDY46BKEZDH7HIG X-MailFrom: SRS0=sw8Z=35=tlinx.org=suse@opensuse.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-config-1; header-match-config-2; header-match-config-3; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: oS-fctry <opensuse-factory@opensuse.org> X-Mailman-Version: 3.3.6 Precedence: list List-Id: Discussions about the development of the openSUSE distributions <factory.lists.opensuse.org> Archived-At: <https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/FJHSAAV5NKVRS4TSSZDY46BKEZDH7HIG/> List-Archive: <https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/> List-Help: <mailto:factory-request@lists.opensuse.org?subject=help> List-Owner: <mailto:factory-owner@lists.opensuse.org> List-Post: <mailto:factory@lists.opensuse.org> List-Subscribe: <mailto:factory-join@lists.opensuse.org> List-Unsubscribe: <mailto:factory-leave@lists.opensuse.org> X-IncomingHeaderCount: 36 Return-Path: suse@tlinx.org X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: HE1EUR04FT063:EE_|DB9P251MB0476:EE_|DB9P251MB0545:EE_|GV1P251MB0793:EE_ X-MS-Office365-Filtering-Correlation-Id: 96c91591-c82f-4ddb-1d56-08dad2459cca X-MS-Exchange-EOPDirect: true X-Sender-IP: 195.135.221.145 X-SID-PRA: SUSE@TLINX.ORG X-SID-Result: NONE X-Microsoft-Antispam: BCL:0; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Nov 2022 20:09:25.0633 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 96c91591-c82f-4ddb-1d56-08dad2459cca X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: HE1EUR04FT063.eop-eur04.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0476 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1991091 X-MS-Exchange-Processed-By-BccFoldering: 15.20.5857.023 X-MS-Exchange-Inbox-Rules-Loop: ppapen@hotmail.de X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-00b75.templateTenant UmVwb3J0aW5nLU1UQTogZG5zO0dWMVAyNTFNQjA3OTMuRVVSUDI1MS5QUk9ELk9VVExPT0su Q09NDQpSZWNlaXZlZC1Gcm9tLU1UQTogZG5zO0RCOVAyNTFNQjA1NDUuRVVSUDI1MS5QUk9E Lk9VVExPT0suQ09NDQpBcnJpdmFsLURhdGU6IFR1ZSwgMjkgTm92IDIwMjIgMjA6MDk6MjYg KzAwMDANCg0KRmluYWwtUmVjaXBpZW50OiByZmM4MjI7YW1kbG54NjBAZ29vZ2xlbWFpbC5j b20NCkFjdGlvbjogZmFpbGVkDQpTdGF0dXM6IDUuNy4yNg0KRGlhZ25vc3RpYy1Db2RlOiBz bXRwOzU1MC01LjcuMjYgVGhpcyBtZXNzYWdlIGRvZXMgbm90IHBhc3MgYXV0aGVudGljYXRp b24gY2hlY2tzIChTUEYgYW5kIERLSU0gYm90aA0KIDU1MC01LjcuMjYgZG8gbm90IHBhc3Mp LiBTUEYgY2hlY2sgZm9yIFt0bGlueC5vcmddIGRvZXMgbm90IHBhc3Mgd2l0aCBpcDoNCiA1 NTAtNS43LjI2IFsyYTAxOjExMTpmNDAwOjdlMGU6OjIwMF0uVG8gYmVzdCBwcm90ZWN0IG91 ciB1c2VycyBmcm9tIHNwYW0sIHRoZQ0KIDU1MC01LjcuMjYgbWVzc2FnZSBoYXMgYmVlbiBi bG9ja2VkLiBQbGVhc2UgdmlzaXQNCiA1NTAtNS43LjI2ICBodHRwczovL3N1cHBvcnQuZ29v Z2xlLmNvbS9tYWlsL2Fuc3dlci84MTEyNiNhdXRoZW50aWNhdGlvbiBmb3IgbW9yZQ0KIDU1 MCA1LjcuMjYgaW5mb3JtYXRpb24uIHoxMi0yMDAyMGEwNTY0MDIyNzRjMDBiMDA0NmFmZDlm MDdiMHNpODM4OTE5OWVkZC4xNCAtIGdzbXRwDQoNCg0K
On 29/11/2022 21.16, James Knott wrote:
On 2022-11-29 15:12, L A Walsh wrote:
Anyone else getting these bounces -- looks like a misconfiguration somewhere?
I haven't seen any.
They do not happen to all people. It depends on the configuration of the sender mail server. Look: amdlnx60@googlemail.com Remote Server returned '550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' If I am reading it correctly, the SPF configuation for Lynn address basically says that openSUSE is not authorized to send email for her, so it is bounced at the outlook mail server. It happens to me as well. Lynn, just create a filter to discard those bounces. There is nothing anybody can do (there is nobody subscribed with that address, so he can not be told or unsubscribed). -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.4 (Legolas))
Hello, Am Dienstag, 29. November 2022, 21:34:15 CET schrieb Carlos E. R.:
It happens to me as well.
Lynn, just create a filter to discard those bounces. There is nothing anybody can do (there is nobody subscribed with that address, so he can not be told or unsubscribed).
I guess you mean nobody with this googlemail address is subscribed? The bounce is generated by a hotmail server, and contains a line Resent-From: <ppapen@hotmail.de> Maybe that address is subscribed? I'l put both the hotmail and googlemail address in CC. Dear person in CC: at least some of the mails distributed via the openSUSE factory mailinglist get rejected during forwarding them from your hotmail to your googlemail address. Please consider to subscribe with your googlemail address, and unsubscribe (or disable delivery to) your hotmail address. This ensures that all mails get delivered to you, and that you don't annoy other people with these bounces ;-) Regards, Christian Boltz -- As usual in the business of trying to please everyone, you cannot please everyone. [Andreas Stieger in opensuse-factory]
On 2022-11-29 23:52, Christian Boltz wrote:
Hello,
Am Dienstag, 29. November 2022, 21:34:15 CET schrieb Carlos E. R.:
It happens to me as well.
Lynn, just create a filter to discard those bounces. There is nothing anybody can do (there is nobody subscribed with that address, so he can not be told or unsubscribed).
I guess you mean nobody with this googlemail address is subscribed?
The bounce is generated by a hotmail server, and contains a line Resent-From: <ppapen@hotmail.de> Maybe that address is subscribed?
I'l put both the hotmail and googlemail address in CC.
Maybe that will work. I have a filter defined that triggers if: From is postmaster@outlook.com Subject begins with Undeliverable and moves them to a different folder, which TH says contains 42 conversations. -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
Christian Boltz wrote:
Hello,
Am Dienstag, 29. November 2022, 21:34:15 CET schrieb Carlos E. R.:
It happens to me as well.
Lynn, just create a filter to discard those bounces. There is nothing anybody can do (there is nobody subscribed with that address, so he can not be told or unsubscribed).
I guess you mean nobody with this googlemail address is subscribed?
The bounce is generated by a hotmail server, and contains a line Resent-From: <ppapen@hotmail.de> Maybe that address is subscribed?
See also poo#121522. I've unsubscribed that address and notified the subscriber. -- Per Jessen, Zürich (5.2°C) Member, openSUSE Heroes (2016 - present) We're hiring - https://en.opensuse.org/openSUSE:Heroes
On Tuesday 2022-11-29 21:12, L A Walsh wrote:
Anyone else getting these bounces -- looks like a misconfiguration somewhere?
Remote Server returned ' 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' [and more of the mail]
The way I read it.. tlinx.org sent a mail to opensuse-factory. opensuse-factory sent it to (I think) ppapen@hotmail.de. ppapen has a Forwarding rule or something, which is why we see the Resent-From header. The new Envelope should have FROM=ppapen at hotmail, and RCPT=amdlnx60 at gmail. Because Microsoft does not implement SRS rewriting, Google uses the SPF data for @tlinx.org rather than the SPF data for @hotmail.de. The check fails and Google gives Microsoft the finger. Microsoft then generates a Non-Delivery Report, but rather than sending the NDR to the Envelope FROM (ppapen), it sends it to the inner From: line (tlinx), which is stupid.
On 2022-11-30 00:04, Jan Engelhardt wrote:
On Tuesday 2022-11-29 21:12, L A Walsh wrote:
Anyone else getting these bounces -- looks like a misconfiguration somewhere?
Remote Server returned ' 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' [and more of the mail]
The way I read it..
tlinx.org sent a mail to opensuse-factory.
opensuse-factory sent it to (I think) ppapen@hotmail.de.
ppapen has a Forwarding rule or something, which is why we see the Resent-From header. The new Envelope should have FROM=ppapen at hotmail, and RCPT=amdlnx60 at gmail.
Because Microsoft does not implement SRS rewriting, Google uses the SPF data for @tlinx.org rather than the SPF data for @hotmail.de. The check fails and Google gives Microsoft the finger.
Microsoft then generates a Non-Delivery Report, but rather than sending the NDR to the Envelope FROM (ppapen), it sends it to the inner From: line (tlinx), which is stupid.
Trust M$ to do stupid things with email :-( -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)
participants (7)
-
Carlos E. R. -
Carlos E.R. -
Christian Boltz -
James Knott -
Jan Engelhardt -
L A Walsh -
Per Jessen