[OSGeo] #3245: lists.osgeo.org should be using TLS/SSL and DKIM

Committees SAC tickets
1

#3245: lists.osgeo.org should be using TLS/SSL and DKIM
---------------------------+-----------------------------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2024-III (strk)
Component: | Keywords:
  SysAdmin/Postfix |
---------------------------+-----------------------------------------------
Someone on gmail is complaining about getting mails delayed by as much as
a day from geos mailing list.

Looking at the mail logs, it seems we are being dinged on sending plain
text mail. So I suspect any email to an @gmail.com address may be dinged
delayed because of this.

The log shows

{{{
Your email has been rate limited because DKIM authentication didn't
421-4.7.30 pass for this message. Gmail requires all bulk email senders to
421-4.7.30 authenticate with DKIM. 421-4.7.30 421-4.7.30

  Your email has been rate limited because this message wasn't sent
421-4.7.29 over a TLS connection. Gmail requires all bulk email senders to
use 421-4.7.29 TLS/SSL for SMTP connections
}}}
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/3245&gt;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

2

#3245: lists.osgeo.org should be using TLS/SSL and DKIM
--------------------------+------------------------------------------------
Reporter: robe | Owner: sac-tickets@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2024-III (strk)
Component: | Resolution:
  SysAdmin/Postfix |
Keywords: |
--------------------------+------------------------------------------------
Comment (by neteler):

Similar case today on the "grass-translations" mailman list (email bounced
to me as the list admin):

{{{
   xxxxxx@gmail.com
     (generated from xxxx@zzzz.org)
     host gmail-smtp-in.l.google.com [wwww:bbbb:4004:c1b::1a]
     SMTP error from remote mail server after pipelined end of data:
     550-5.7.26 Your email has been blocked because the sender is
unauthenticated.
     550-5.7.26 Gmail requires all senders to authenticate with either SPF
or DKIM.
     550-5.7.26
     550-5.7.26 Authentication results:
     550-5.7.26 DKIM = did not pass
     550-5.7.26 SPF [osgeo.org] with ip: [2001:470:142::13] = did not pass
     550-5.7.26
     550-5.7.26 For instructions on setting up authentication, go to
     550 5.7.26
Email sender guidelines - Google Workspace Admin Help
af79cd13be357-7acb08c572dsi387238685a.244 - gsmtp
}}}
--
Ticket URL: <https://trac.osgeo.org/$(basename)s/ticket/3245#comment:1&gt;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.