Bounce on users lists

[Michael Scherer]

Le vendredi 16 janvier 2015 à 09:31 +0100, Sandro Bonazzola a écrit :
> Il 16/01/2015 09:18, Michael Scherer ha scritto:
> > Le vendredi 16 janvier 2015 à 08:23 +0100, Sandro Bonazzola a écrit :
> >> Il 15/01/2015 18:31, Michael Scherer ha scritto:
> >>> Hi,
> >>>
> >>> Itamar, by the proxy of Brian, did asked me to look on the bounce issue
> >>> we have on the users lists. So after a few hours of careful log reading,
> >>> here is my finding.
> >>>
> >>> The bounce situation
> >>> ---------------------
> >>>
> >>> We (ml admin) get on a regular basis people who get unsubscribed and
> >>> message about bounce. People being unsubscribed automatically is
> >>> bad(tm), and bounces are annoying. 
> >>>
> >>>
> >>> Investigation
> >>> -------------
> >>>
> >>> A first look show that our mails are bounced as they are marked as spam
> >>> by Google. Google doc on the matter do not give much, some people point
> >>> to using dkim, spf, etc. But spf is not for us, but for the sender, and
> >>> dkim is not ml friendly, afaik, and requires upstream support if I
> >>> understood well.
> >>>
> >>> Not all mails are bounced, which is good. That mean the ip is not
> >>> problematic. 
> >>>
> >>> So I took a few hours to look on every bounce and roughly, there is 2
> >>> groups.
> >>>
> >>> Group 1
> >>> --------
> >>>
> >>> First group is that all mail from the same poster on the users list have
> >>> bounced at Google. Out of the 16 mail he sent, 16 have been rejected by
> >>> Google. I have no idea why, I suspect the spf policy, but it did looked
> >>> ok. None of the mail of answer had a issue, so that's likely not a
> >>> content problem.  
> >>>
> >>> However, the ip address of the sender is in the SORBS blacklist, so
> >>> that's likely what trigger Google spam filter.
> >>>
> >>> Not much we can do, besides contacting him, which I will do.
> >>>
> >>> Group 2
> >>> --------
> >>> Roughly, that's mail in this thread :
> >>> http://lists.ovirt.org/pipermail/users/2015-January/030494.html
> >>>
> >>> and the mails from Sandro :
> >>> http://lists.ovirt.org/pipermail/users/2015-January/030420.html
> >>> http://lists.ovirt.org/pipermail/users/2015-January/030423.html
> >>>
> >>> Common point, use of goo.gl and ur1.ca. It turn out that both domain are
> >>> flagged as URI spam, since that's used by spammer to hide their link. So
> >>> I suspect that Gmail started to "learn" about them as spam, as the rest
> >>> of the world did :
> >>> http://multirbl.valli.org/lookup/ur1.ca.html
> >>> http://multirbl.valli.org/lookup/goo.gl.html
> >>>
> >>> Again, not much we can do, besides asking to people to not use these
> >>> services ( which is not gonna work I think ).
> >>
> >> I may try to use bit.ly red.ht instead of goo.gl.
> >> Can we provide our own url shortener on ovirt.org? That should avoid blacklisting.
> > 
> > I do not think bit.ly is gonna change much. It is likely abused for the
> > same reason by the same people. And the url are too complicated to be
> > sent sometime, so we cannot just avoid them at all.
> > 
> > I also pondered about adding a url shortener on ovirt.org. Besides the
> > load on admin team it create, I think it would have the same issue as
> > the others after some time, and so we would need to add some
> > authentication, which start to make thing a bit complicated. 
> 
> Not sure if authentication will work as expected, but this one seems quite simple to configure and deploy:
> https://github.com/mrtazz/katana

Not that keen on adding it on the infra, but could work for openshift
maybe ?

-- 
Michael Scherer
Open Source and Standards, Sysadmin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.ovirt.org/pipermail/infra/attachments/20150116/f941753a/attachment.sig>