Bug#1099315: reportbug: BTS mail forwarding causes DMARC failures
Package: reportbug
X-Debbugs-Cc: martin@meltin.net
Version: 13.1.0
Severity: important
Dear Maintainer,
When I submit a Debian bug using reportbug, I receive many DMARC
reports with failures in them. It appears that the Debian BTS
forwards emails without changing the original sender. This makes DKIM
and SPF fail in many cases. It would be better to rewrite the sender
to, say, <owner@bugs.debian.org> before forwarding the message.
It is hard to judge the severity of this, since I don't know how many
recipients' SPAM filtering might have rejected the message based on
DMARC/DKIM/SPF failures. Therefore, I'm marking it as important.
Here are some example outputs from dmarc-cat, for DMARC reports
relating to email forwarded by the Debian BTS (it is difficult for me
to provide attachments because of my local machine email config):
$ dmarc-cat gmx.net\!meltin.net\!1740787200\!1740873599\!cf6fcf3b8bb843b6acd2385e77dd2f5b.xml.gz
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert
Reporting by: GMX — noreply-dmarc@sicher.gmx.net
From 2025-03-01 11:00:00 +1100 AEDT to 2025-03-02 10:59:59 +1100 AEDT
Domain: meltin.net
Policy: p=none; dkim=r; spf=r
Reports(1):
IP Count From RFrom RDKIM RSPF
bendel.debian.org. 4 meltin.net meltin.net fail none
$ dmarc-cat yahoo.com\!meltin.net\!1740787200\!1740873599.xml.gz
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert
Reporting by: Yahoo — dmarchelp@yahooinc.com
From 2025-03-01 11:00:00 +1100 AEDT to 2025-03-02 10:59:59 +1100 AEDT
Domain: meltin.net
Policy: p=none; dkim=r; spf=r
Reports(1):
IP Count From RFrom RDKIM RSPF
bendel.debian.org. 1 meltin.net meltin.net permerror none
$ dmarc-cat google.com\!meltin.net\!1737158400\!1737244799.zip
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert
Reporting by: google.com — noreply-dmarc-support@google.com
From 2025-01-18 11:00:00 +1100 AEDT to 2025-01-19 10:59:59 +1100 AEDT
Domain: meltin.net
Policy: p=none; dkim=r; spf=r
Reports(10):
IP Count From RFrom RDKIM RSPF
mitropoulos.debian.org. 36 meltin.net meltin.net fail none
mail.tryninja.io. 29 meltin.net meltin.net fail none
i-bif.cloudflare-email.net. 2 meltin.net meltin.net fail none
bendel.debian.org. 2 meltin.net meltin.net fail pass
smtp-mx-ubuntu-0.canonical.com. 1 meltin.net meltin.net fail softfail
bendel.debian.org. 1 meltin.net meltin.net fail none
mail-sor-f69.google.com. 1 meltin.net meltin.net fail pass
smtp-mx-ubuntu-1.canonical.com. 1 meltin.net meltin.net fail softfail
mail-sor-f41.google.com. 1 meltin.net mokyokit.com pass pass
yw-1204.doraji.xyz. 1 meltin.net meltin.net fail none
Thanks...
-- Package-specific info:
** Environment settings:
EDITOR=editor
PAGER=less
VISUAL=editor
NAME='Martin Schwenke'
INTERFACE=text
** /home/martins/.reportbugrc:
reportbug_version "7.10.3"
mode standard
ui text
offline
email "martin@meltin.net"
no-cc
list-cc-me
smtphost reportbug.debian.org
-- System Information:
Debian Release: trixie/sid
APT prefers testing
APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.11-rt-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages reportbug depends on:
ii apt 2.9.30
ii python3 3.13.2-1
ii python3-reportbug 13.1.0
ii sensible-utils 0.0.24
reportbug recommends no packages.
Versions of packages reportbug suggests:
ii claws-mail 4.3.0-2+b3
ii debconf 1.5.89
pn debsums <none>
pn dlocate <none>
ii emacs-bin-common 1:30.1+1-3
ii file 1:5.45-3+b1
ii gnupg 2.2.46-1
ii postfix [mail-transport-agent] 3.9.1-10+b1
pn python3-urwid <none>
pn reportbug-gtk <none>
ii xdg-utils 1.2.1-2
Versions of packages python3-reportbug depends on:
ii apt 2.9.30
ii file 1:5.45-3+b1
ii python3 3.13.2-1
ii python3-apt 2.9.9+b1
ii python3-debian 0.1.49
ii python3-debianbts 4.1.1
ii python3-requests 2.32.3+dfsg-4
ii sensible-utils 0.0.24
python3-reportbug suggests no packages.
-- no debconf information
peace & happiness,
martin
Reply to: