Keyboard Shortcuts
Likes
- GroupManagersForum
- Messages
Search
Re: Email and Bounce probes timeout
#bouncedemails
Chuck Palmer
Don't you just love it when problems just "disappear"??
Rather than delete/re-add him, I sent another bounce probe to him and after a few minutes it said it went thru!? I no longer see any bounce messages so I'm going to assume everything is OK on his end now. FYI - that ip address was on GoDaddy's 184.168 network out in Arizona.? He lives in central Florida so it may well have been some sort of forwarding issue.? I don't know him well enough to ask. Thanks for the feedback. -chuck |
Re: Help figure out DMARC failure
Jim,
toggle quoted message
Show quoted text
On Sun, Aug 9, 2020 at 10:19 AM, Jim Wilson wrote: Also, @Mark Berry, it is all but certain that spammers are using your domain now, judging by those counts. I am very confident it has nothing to do with GIO whatsoever.I found a raw report with the Moldavan IP address.I don't quite understand the <auth_results> section:? it looks like DKIM is passing using the groups.io signature, but the foreign IP (bleza(dot)skilldivinet(dot)net) is passing on SPF. Are they somehow spoofing the groups.io DKIM signature? I tried to attach the XML file but the web UI doesn't show the attachment. Here is an excerpt: ? <record>??? ??? <row>??? ????? <source_ip>194.50.188.140</source_ip>??? ????? <count>1896</count>??? ????? <policy_evaluated>??? ??????? <disposition>none</disposition>??? ??????? <dkim>fail</dkim>??? ??????? <spf>fail</spf>??? ????? </policy_evaluated>??? ??? </row>??? ??? <identifiers>??? ????? <header_from>mydomain.com</header_from>??? ??? </identifiers>??? ??? <auth_results>??? ????? <dkim>??? ??????? <domain>groups.io</domain>??? ??????? <result>pass</result>??? ????? </dkim>??? ????? <spf>??? ??????? <domain>bleza.skilldivine.net</domain>??? ??????? <result>pass</result>??? ????? </spf>??? ??? </auth_results>??? ? </record>??? There does seem to be another problem, however, that may be exacerbating the problems experienced by Mark Berry!I think I duplicated what you are seeing. When the DKIM failure detail is "Body Hash Did Not Verify", that makes sense because Outlook only gives me the header to upload, not the raw email including the body. (Forensic analysis instructions:? https://www.metaspike.com/leveraging-dkim-email-forensics/). Gmail provides the raw original; in that case, I had one success (on an email from Yahoo itself) and a few failures. In at least one case, I suspect the failure may be due to analyzing an older message and the DKIM signature has since rotated. This to me feels like a rabbit hole--I doubt that I will uncover that the Internet's DKIM system is broken everywhere; I just don't understand every nuance, nor should I need to. Mark |
Major changes for new Basic groups
There are major changes coming for new Basic groups that are created starting August 24, 2020.? Details at
Duane -- The official Groups.io user documentation is in the Groups.io Help Center. GMF's Unofficial Help Wiki: /g/GroupManagersForum/wiki |
Re: Roadtrek International starting on Groups
Hank
Shal,
That was what I needed to hear.? Thank you.? I won't get excited about my name being on any invites because of your explanation. .I had already going to let members know about the +owner contact email, it was just that Welcome/Invite 'signature'.? Now I know why. Thank you Hank Gettysburg |
Re: Payment by PayPal
On Mon, Aug 10, 2020 at 11:40 AM, Cal wrote:
How do I pay via PayPal?What are you wanting to pay for?? I don't think you can use PayPal to pay fees on GIO.? GIO uses Stripe as their payment processor and PayPal isn't an option they can accept. Duane -- The official Groups.io user documentation is in the Groups.io Help Center. GMF's Unofficial Help Wiki: /g/GroupManagersForum/wiki |
Re: dummyfile."n"
Bruce 1) no ¡°View Source" on my menu ?(iPhone) 2) Is there a way to ¡°force¡± displaying a iNet photo link as an an image? ?Some formatting of the link that I¡¯m ignorant of? ?Whenever I paste a link to an online pic, it simply shows up as a link, not the image. 3) does that reduce used storage space? ?(Confirming an obvious answer) ?Seems the way to go if confident the image/link is unlikely to get wiped off the?wwww.?
4). Can I paste a link (showing as an image not link) to a gio pic? Rather than uploading another pic? (reduce precious space used up.) -Ken On Mon, Aug 10, 2020 at 11:14 AM, Bruce Bowman wrote:
On Mon, Aug 10, 2020 at 10:42 AM, Ken Kloeber wrote: ? ? |
Re: dummyfile."n"
On Mon, Aug 10, 2020 at 10:42 AM, Ken Kloeber wrote:
no links, these were copied to the cb and pasted from the cb. ?Copying something from a web site generally puts a link on your clipboard, not the image. If you're not convinced of this, below is a photo from Facebook (I right-clicked it, selected Copy Image from the Chrome popup menu, and pasted directly into this message). Note how the image has not been resized to 640px in the longest dimension, as it would be if it were really uploaded to groups.io. You won't find this image in the Emailed Photos folder, either. Now select "View Source" from the More menu at bottom right. You should see something like this where the image is located:?<img src="https://scontent-lga3-1.xx.fbcdn.net/...(AND SO ON)" alt="Image may contain: sky, night, cloud, outdoor and nature" /> This is a link to the original image. If I subsequently delete that image from Facebook the photo will go missing from the message archive, too. Hope this helps, Bruce ![]() Check out the groups.io Help Center?and?groups.io Owners Manual |
Re: member unsubscribed for 'marking a message as spam'?
Thanks, Isis, for this detailed response, which confirms that I haven't missed any useful list resources in my own research.
toggle quoted message
Show quoted text
Sorry for the delay in responding, by the way, but I'm on Long Island NY, and after Isaias passed directly over us last week we lost our internet connection, and it's still not back almost a week later. I finally dug out a wifi dongle for my main machine here, and am burning through data on my cellular hotspot at an alarming rate! Bill On 03-Aug-20 11:00 PM, isis feral via groups.io wrote:
Bill, I wish I had a good list of providers, or more precisely, a list of good providers, but pretty much every one I've come across has one limitation or another. So I have to decide which limitations are least likely to be a problem for the people in my groups. |
Re: dummyfile."n"
On Mon, Aug 10, 2020 at 06:02 AM, Ken Kloeber wrote:
Another somewhat related question on pics/attachments/inserted.??if a pic is pasted from the clipboard, it looks to me that is saved in some obscure filespace (obviously does not show up in the?emailed/attached photos folder.)?Ken -- I am not able to reproduce this behavior. But see below... But I had has issues with pasted pics disappearing sometimes (replaced with the broken image icon.)It sounds like you aren't actually pasting in an image, but a link to an image located somewhere else on the web. Since the actual image is never resident in groups.io, it does not appear in Emailed Photos; and when that image is subsequently moved or deleted at the source, the fetch no longer works, either. If you want to ensure an image is retained in the message archive (or wiki page), using the web interface, you have to save it to your own computer first and use either the "Add pictures" or "Add attachments" dialog. How things behave when sending an email to the group depends on the behavior of your email client, but generally speaking a cut-and-paste operation cannot be expected to create a local copy. See also:??/g/GroupManagersForum/message/756 Hope this helps, Bruce Check out the groups.io Help Center?and?groups.io Owners Manual |
Re: dummyfile."n"
BRUCE: |
Re: Help figure out DMARC failure
Wow, lots of comments. Thanks for participating in this discussion. I can't respond to everything but a few thoughts:
- I'm reaching out to support to ask if my headers have already been "munged" or if there is something else that can be done. - I will definitely be moving to p=quarantine and p=reject.? If groups.io won't work with my custom domain, I'll change to a Gmail address. - Jim, re. SPF, I'm not sure that include=groups.io even works, as that does not resolve to the sending IP. 66.175.222.108 is Linode and I don't want to allow everyone hosted there to send from my domain. - Sending mail "on behalf of" can be convenient and has long historical precedent, but like most things in Internet space, as abuse rises, added security is needed. I fully expect that I as domain owner must explicitly authorize a select few senders by modifying my DNS. I like the way SendGrid implements this:? with a few custom CNAME records, they are able to SPF-authenticate and DKIM-sign messages on my behalf. But I'm willing to just a manual SPF modification if that is enough. Meanwhile, Moldava is still bombarding from my domain:? 1900 messages yesterday. |
Re: Subgroup members
On Sat, Aug 8, 2020 at 04:07 PM, Cal wrote:
I presume you mean that a subgroup Mod can cause someone to be added to the main group that the main group Mod(s) didn't previously know about or approve (and therefore, is beyond the control of the main group Mod(s).? Is that what you meant when you said "gives them [a subgroup Mod] some control over the main group member list"?Yes, precisely. Andy |
Re: Roadtrek International starting on Groups
Hank,
Now because I had set it up originally, any Welcome/Invite messageIt is not because you founded the group, see the references Duane cited. Invites go out with a constructed email address in the From that facilitates accepting the invitation by a simple reply. The text of the invitation contains the identification of the owner or moderator sending the invitation ("You have been Invited by ..."). That's intentional so that the invitees have some idea who is sending the invitation and why. The Welcome notice goes out From the group's +owner address (e.g. [email protected]). The Welcome text you can customize, and need to adjust anytime you change the group's address. 2) How could I set up a way for anyone (member or not) to send anThat's what the +owner address does. It forwards to all owners and moderators who elect to receive +owner messages. See the bottom of your Subscription page - you may need to adjust the setting to receive +owner messages from non-members. Same goes for any other owners/mods in your group. Shal -- Help: /helpcenter More Help: /g/GroupManagersForum/wiki Even More Help: Search button at the top of Messages list |
Re: Help figure out DMARC failure
Jim,
@Shal Farley, I'm using "p=reject" intentionally because I am muchTo be clear, if your domain is used only by you or members of your organization to communicate directly with individuals then I think that's perfectly appropriate. That is the designed use case for DMARC. I would rather deal with any resulting issues but have had none soIf your domain is a general mailbox provider then I disagree. You may not have experienced any resulting issues, but that doesn't mean there aren't any. Your mailbox users might well wish to use services like Groups.io, or traditional email list services, to communicate indirectly with others; and in those cases you're causing trouble for them and their correspondents. I believe there is a reason Gmail does not use p=reject (nor do they blindly obey the p=reject of others) - I think they understand that there would be adverse consequences for their users if they did.* In my opinion the mailbox providers that do use DMARC this way are acting a bit like Lily Tomlin's character Ernestine: "We don't care, we don't have to. We're the phone company." Maybe someday ARC (RFC 8617) will gain enough adoption to effectively resolve the mailing-list problems with DMARC, but it hasn't happened yet. Shal * That said, Gmail has tightend up a bit on the deliverability of messages with non-aligned envelope and header From, at least in the specific case of messages I receive that have my own address in the header From. They deliver them to my inbox, but with a large warning banner about not being able to authenticate the message. But so far they haven't taken any adverse action against messages from other Gmail users (or non-Gmail users) that I receive indirectly. -- Help: /helpcenter More Help: /g/GroupManagersForum/wiki Even More Help: Search button at the top of Messages list |
Re: Help figure out DMARC failure
@Mark Berry,
The problem with setting SPF to use that single IP is that there are actually two?addresses listed in the GIO SPF and they are subject to change. Using the "include" statement avoids the need to monitor and stays up-to-date automatically. The current GIO SPF is: ? ? "v=spf1 ip4:66.175.222.12 ip4:66.175.222.108 include:mail.zendesk.com include:smtp.zendesk.com ~all" Yes, it includes zendesk, too, but I don't have a problem with that at all. Also, @Mark Berry, it is all but certain that spammers are using your domain now, judging by those counts. I am very confident it has nothing to do with GIO whatsoever. I strongly recommend using?"p=reject" and "pct=100" as well as "adkim=s" and "aspf=s" to alert receivers accordingly. They still have the option of passing it and flagging it as spam but this is the only real defense available to you because SPF and DKIM are simply not enough, alone or together. @Shal Farley, I'm using "p=reject" intentionally because I am much more interested in stopping spammers using our domains to the maximum extent possible. I would rather deal with any resulting issues but have had none so far. I included the GIO SPF in our SPF.? No one else should be sending email on our behalf at this time. If that changes, I will make adjustments as necessary. FYI, our SPF is: ? ? "v=spf1 +a +mx +include:spf.protection.outlook.com +include:groups.io -all" In case anyone is wondering, the "+" signs create an implicit statement because I have learned you cannot always rely on defaults. See . Our DMARC is: ? ? "v=DMARC1; p=reject; sp=reject; pct=100; adkim=s; aspf=s; rua=[redacted]" There does seem to be another problem, however, that may be exacerbating the problems experienced by Mark Berry! I am finding that the DKIM Signature Body Hash generated by GIO is failing on two (other than Valimail) testing sites that can perform DMARC, DKIM and SPF checks against GIO headers. I used MxToolBox () and AppMailDev () on quite a few emails received via?O365?and on?Gmail?and, even though both O365 and Gmail shows "dkim=pass" in the "Authentication" section, they all failed during testing. So, I then tested emails from Capital One, Cisco, AT&T, etc., and they all failed DKIM as well. That's a real problem! It leads me to believe DKIM checking may be faulty on both testing sites and perhaps on Valimail, as well, so I will be considering third-party "header check" results as "unverified" or "questionable" going forward. For the time being, I will only treat DMARC reports as valid since they are sourced directly from receiving mail servers. -- Jim |
Re: Photos and attachments
On Sat, Aug 8, 2020 at 10:13 PM, Larry McDavid wrote:
it is easy to enter many special characters that are not on the standard computer keyboard, using both Windows and Apple computers. Unless it¡¯s windows laptops, no Num pads.? It kills me not being able to enter a null character sometimes, when a space doesn¡¯t make it in certain situations/software.? |
Re: Email and Bounce probes timeout
#bouncedemails
John Pearce
Not sure if this will help but months ago I saw a problem with a member of our group that also referenced i/o timeout.? The issue in that case was the member was having his gmail address subscribed to the group automatically forward email to another address.? There was a problem (member never explained the problem) with the address being forwarded to.
John P |