¿ªÔÆÌåÓý

Date

Re: Email and Bounce probes timeout #bouncedemails

Chuck Palmer
 

Don't you just love it when problems just "disappear"??
Rather than delete/re-add him, I sent another bounce probe to him and after a few minutes it said it went thru!? I no longer see any bounce messages so I'm going to assume everything is OK on his end now.

FYI - that ip address was on GoDaddy's 184.168 network out in Arizona.? He lives in central Florida so it may well have been some sort of forwarding issue.? I don't know him well enough to ask.

Thanks for the feedback.
-chuck


Re: Help figure out DMARC failure

 

Jim,


On Sun, Aug 9, 2020 at 10:19 AM, Jim Wilson wrote:
Also, @Mark Berry, it is all but certain that spammers are using your domain now, judging by those counts. I am very confident it has nothing to do with GIO whatsoever.
I found a raw report with the Moldavan IP address.I don't quite understand the <auth_results> section:? it looks like DKIM is passing using the groups.io signature, but the foreign IP (bleza(dot)skilldivinet(dot)net) is passing on SPF. Are they somehow spoofing the groups.io DKIM signature? I tried to attach the XML file but the web UI doesn't show the attachment. Here is an excerpt:

? <record>???
??? <row>???
????? <source_ip>194.50.188.140</source_ip>???
????? <count>1896</count>???
????? <policy_evaluated>???
??????? <disposition>none</disposition>???
??????? <dkim>fail</dkim>???
??????? <spf>fail</spf>???
????? </policy_evaluated>???
??? </row>???
??? <identifiers>???
????? <header_from>mydomain.com</header_from>???
??? </identifiers>???
??? <auth_results>???
????? <dkim>???
??????? <domain>groups.io</domain>???
??????? <result>pass</result>???
????? </dkim>???
????? <spf>???
??????? <domain>bleza.skilldivine.net</domain>???
??????? <result>pass</result>???
????? </spf>???
??? </auth_results>???
? </record>???

There does seem to be another problem, however, that may be exacerbating the problems experienced by Mark Berry!

I am finding that the DKIM Signature Body Hash generated by GIO is failing on two (other than Valimail) testing sites that can perform DMARC, DKIM and SPF checks against GIO headers.

I used MxToolBox () and AppMailDev () on quite a few emails received via?O365?and on?Gmail?and, even though both O365 and Gmail shows "dkim=pass" in the "Authentication" section, they all failed during testing.

So, I then tested emails from Capital One, Cisco, AT&T, etc., and they all failed DKIM as well. That's a real problem! It leads me to believe DKIM checking may be faulty on both testing sites and perhaps on Valimail, as well, so I will be considering third-party "header check" results as "unverified" or "questionable" going forward.

For the time being, I will only treat DMARC reports as valid since they are sourced directly from receiving mail servers.
I think I duplicated what you are seeing. When the DKIM failure detail is "Body Hash Did Not Verify", that makes sense because Outlook only gives me the header to upload, not the raw email including the body. (Forensic analysis instructions:? https://www.metaspike.com/leveraging-dkim-email-forensics/). Gmail provides the raw original; in that case, I had one success (on an email from Yahoo itself) and a few failures. In at least one case, I suspect the failure may be due to analyzing an older message and the DKIM signature has since rotated. This to me feels like a rabbit hole--I doubt that I will uncover that the Internet's DKIM system is broken everywhere; I just don't understand every nuance, nor should I need to.

Mark


Major changes for new Basic groups

 

There are major changes coming for new Basic groups that are created starting August 24, 2020.? Details at

Duane
--
The official Groups.io user documentation is in the Groups.io Help Center.
GMF's Unofficial Help Wiki: /g/GroupManagersForum/wiki


Re: Roadtrek International starting on Groups

Hank
 

Duane,

Thanks for the pointer to the Owners Guide.? Going to be helpful.


Re: Roadtrek International starting on Groups

Hank
 

Shal,

That was what I needed to hear.? Thank you.? I won't get excited about my name being on any invites because of your explanation.

.I had already going to let members know about the +owner contact email, it was just that Welcome/Invite 'signature'.? Now I know why.

Thank you

Hank
Gettysburg


Re: Payment by PayPal

 

On Mon, Aug 10, 2020 at 11:40 AM, Cal wrote:
How do I pay via PayPal?
What are you wanting to pay for?? I don't think you can use PayPal to pay fees on GIO.? GIO uses Stripe as their payment processor and PayPal isn't an option they can accept.

Duane
--
The official Groups.io user documentation is in the Groups.io Help Center.
GMF's Unofficial Help Wiki: /g/GroupManagersForum/wiki


Payment by PayPal

 

How do I pay via PayPal?


Re: dummyfile."n"

 

Bruce

I have understand the link vs image deal (other ongoing thread.)
Not copied from the worldwide wonderful whacky web, a local file. Opened in whatever viewer or photo app, copy/paste.

But to your point:

1) no ¡°View Source" on my menu ?(iPhone)

2) Is there a way to ¡°force¡± displaying a iNet photo link as an an image? ?Some formatting of the link that I¡¯m ignorant of? ?Whenever I paste a link to an online pic, it simply shows up as a link, not the image.

3) does that reduce used storage space? ?(Confirming an obvious answer) ?Seems the way to go if confident the image/link is unlikely to get wiped off the?wwww.?

4). Can I paste a link (showing as an image not link) to a gio pic? Rather than uploading another pic? (reduce precious space used up.)

-Ken

On Mon, Aug 10, 2020 at 11:14 AM, Bruce Bowman wrote:
On Mon, Aug 10, 2020 at 10:42 AM, Ken Kloeber wrote:
no links, these were copied to the cb and pasted from the cb. ?
Copying something from a web site generally puts a link on your clipboard, not the image.

If you're not convinced of this, below is a photo from Facebook (I right-clicked it, selected Copy Image from the Chrome popup menu, and pasted directly into this message). Note how the image has not been resized to 640px in the longest dimension, as it would be if it were really uploaded to groups.io. You won't find this image in the Emailed Photos folder, either.

Now select "View Source" from the More menu at bottom right. You should see something like this where the image is located:?<img src="https://scontent-lga3-1.xx.fbcdn.net/...(AND SO ON)" alt="Image may contain: sky, night, cloud, outdoor and nature" />

This is a link to the original image. If I subsequently delete that image from Facebook the photo will go missing from the message archive, too.

Hope this helps,
Bruce





Check out the groups.io Help Center?and?groups.io Owners Manual

?

?


Re: dummyfile."n"

 
Edited

On Mon, Aug 10, 2020 at 10:42 AM, Ken Kloeber wrote:
no links, these were copied to the cb and pasted from the cb. ?
Copying something from a web site generally puts a link on your clipboard, not the image.

If you're not convinced of this, below is a photo from Facebook (I right-clicked it, selected Copy Image from the Chrome popup menu, and pasted directly into this message). Note how the image has not been resized to 640px in the longest dimension, as it would be if it were really uploaded to groups.io. You won't find this image in the Emailed Photos folder, either.

Now select "View Source" from the More menu at bottom right. You should see something like this where the image is located:?<img src="https://scontent-lga3-1.xx.fbcdn.net/...(AND SO ON)" alt="Image may contain: sky, night, cloud, outdoor and nature" />

This is a link to the original image. If I subsequently delete that image from Facebook the photo will go missing from the message archive, too.

Hope this helps,
Bruce





Check out the groups.io Help Center?and?groups.io Owners Manual


Re: dummyfile."n"

 

Bruce

no links, these were copied to the cb and pasted from the cb. ?

they were a ok when saved and viewed, but ¡°gone¡± days l8tr. ?There¡¯s times I must paste rather than insert a file due to the command decision/restricting not being to add pix when editing a messages.?

Thx.?


Re: member unsubscribed for 'marking a message as spam'?

 

Thanks, Isis, for this detailed response, which confirms that I haven't missed any useful list resources in my own research.

Sorry for the delay in responding, by the way, but I'm on Long Island NY, and after Isaias passed directly over us last week we lost our internet connection, and it's still not back almost a week later. I finally dug out a wifi dongle for my main machine here, and am burning through data on my cellular hotspot at an alarming rate!

Bill

On 03-Aug-20 11:00 PM, isis feral via groups.io wrote:
Bill, I wish I had a good list of providers, or more precisely, a list of good providers, but pretty much every one I've come across has one limitation or another. So I have to decide which limitations are least likely to be a problem for the people in my groups.
For the groups with a lot of people with disabilities that make technology difficult for them, I've had to hold my nose and go to Google Groups, because it's one of the only options that allows manual adding of members. Dealing with invites may seem easy for many, but it's not for everyone, and I've not been able to get a couple of people into my Gio groups because they just can't get through that process.
Otherwise I tend to still prefer Groups.io. I stay away from Yahoo Groups altogether now, because the lack of digest option and archives is a deal breaker. I've also worked with some Mailman lists that were provided by people who had accounts with various providers, but because of the cost have seen some of them go by the wayside when people ran out of money, and then all the archives and work we shared were nuked (reminiscent of Yahoo). I helped with one Mailman groups that was provided as a favor by a friend to a friend, and there we've ended up being a bit at the mercy of someone else's whims. There are various political groups that provide list services, but I would only go there if everyone in the group is aligned with the specific politics of the provider, which doesn't happen all that often.
I know there were other options some years back when I was looking for alternatives, and for the most part it seemed that they would not likely survive, so I didn't even try. Most of them I was never able to find again. Other email list providers have been trying to match social media platforms, which I have zero interest in, but there seem to be more and more of those around.
Sorry, no comprehensive list here, but those have been my thoughts about the various alternatives I've researched over the years for the communities that I work with, who tend to have specific needs that I have to accommodate.
Isis


Re: dummyfile."n"

 

On Mon, Aug 10, 2020 at 06:02 AM, Ken Kloeber wrote:
Another somewhat related question on pics/attachments/inserted.??if a pic is pasted from the clipboard, it looks to me that is saved in some obscure filespace (obviously does not show up in the?emailed/attached photos folder.)?
Ken -- I am not able to reproduce this behavior. But see below...

But I had has issues with pasted pics disappearing sometimes (replaced with the broken image icon.)

Am I doing something wrong?
It sounds like you aren't actually pasting in an image, but a link to an image located somewhere else on the web. Since the actual image is never resident in groups.io, it does not appear in Emailed Photos; and when that image is subsequently moved or deleted at the source, the fetch no longer works, either.

If you want to ensure an image is retained in the message archive (or wiki page), using the web interface, you have to save it to your own computer first and use either the "Add pictures" or "Add attachments" dialog. How things behave when sending an email to the group depends on the behavior of your email client, but generally speaking a cut-and-paste operation cannot be expected to create a local copy.

See also:??/g/GroupManagersForum/message/756

Hope this helps,
Bruce

Check out the groups.io Help Center?and?groups.io Owners Manual


Re: dummyfile."n"

 

BRUCE:

Another somewhat related question on pics/attachments/inserted.??if a pic is pasted from the clipboard, it looks to me that is saved in some obscure filespace (obviously does not show up in the?emailed/attached photos folder.)?
But I had has issues with pasted pics disappearing sometimes (replaced with the broken image icon.)

Am I doing something wrong?? Is there some way to ensure that pics remain embedded in messages and/or wiki pages?? It's also happened on wiki page photos that were pasted in.

-ken




Re: Help figure out DMARC failure

 

Wow, lots of comments. Thanks for participating in this discussion. I can't respond to everything but a few thoughts:

- I'm reaching out to support to ask if my headers have already been "munged" or if there is something else that can be done.

- I will definitely be moving to p=quarantine and p=reject.? If groups.io won't work with my custom domain, I'll change to a Gmail address.

- Jim, re. SPF, I'm not sure that include=groups.io even works, as that does not resolve to the sending IP. 66.175.222.108 is Linode and I don't want to allow everyone hosted there to send from my domain.

- Sending mail "on behalf of" can be convenient and has long historical precedent, but like most things in Internet space, as abuse rises, added security is needed. I fully expect that I as domain owner must explicitly authorize a select few senders by modifying my DNS. I like the way SendGrid implements this:? with a few custom CNAME records, they are able to SPF-authenticate and DKIM-sign messages on my behalf. But I'm willing to just a manual SPF modification if that is enough.

Meanwhile, Moldava is still bombarding from my domain:? 1900 messages yesterday.


Re: Subgroup members

 

On Sat, Aug 8, 2020 at 04:07 PM, Cal wrote:
I presume you mean that a subgroup Mod can cause someone to be added to the main group that the main group Mod(s) didn't previously know about or approve (and therefore, is beyond the control of the main group Mod(s).? Is that what you meant when you said "gives them [a subgroup Mod] some control over the main group member list"?
Yes, precisely.

Andy


Re: Roadtrek International starting on Groups

 

Hank,

Now because I had set it up originally, any Welcome/Invite message
goes out with MY display name and linked to my email address.
It is not because you founded the group, see the references Duane cited.

Invites go out with a constructed email address in the From that facilitates accepting the invitation by a simple reply. The text of the invitation contains the identification of the owner or moderator sending the invitation ("You have been Invited by ..."). That's intentional so that the invitees have some idea who is sending the invitation and why.

The Welcome notice goes out From the group's +owner address (e.g. [email protected]). The Welcome text you can customize, and need to adjust anytime you change the group's address.

2) How could I set up a way for anyone (member or not) to send an
email to moderators with questions and not have it only come only to
me?.
That's what the +owner address does. It forwards to all owners and moderators who elect to receive +owner messages. See the bottom of your Subscription page - you may need to adjust the setting to receive +owner messages from non-members. Same goes for any other owners/mods in your group.

Shal


--
Help: /helpcenter
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Help figure out DMARC failure

 

Jim,

@Shal Farley, I'm using "p=reject" intentionally because I am much
more interested in stopping spammers using our domains to the maximum
extent possible.
To be clear, if your domain is used only by you or members of your organization to communicate directly with individuals then I think that's perfectly appropriate. That is the designed use case for DMARC.

I would rather deal with any resulting issues but have had none so
far.
If your domain is a general mailbox provider then I disagree. You may not have experienced any resulting issues, but that doesn't mean there aren't any.

Your mailbox users might well wish to use services like Groups.io, or traditional email list services, to communicate indirectly with others; and in those cases you're causing trouble for them and their correspondents.

I believe there is a reason Gmail does not use p=reject (nor do they blindly obey the p=reject of others) - I think they understand that there would be adverse consequences for their users if they did.* In my opinion the mailbox providers that do use DMARC this way are acting a bit like Lily Tomlin's character Ernestine: "We don't care, we don't have to. We're the phone company."

Maybe someday ARC (RFC 8617) will gain enough adoption to effectively resolve the mailing-list problems with DMARC, but it hasn't happened yet.


Shal
* That said, Gmail has tightend up a bit on the deliverability of messages with non-aligned envelope and header From, at least in the specific case of messages I receive that have my own address in the header From. They deliver them to my inbox, but with a large warning banner about not being able to authenticate the message. But so far they haven't taken any adverse action against messages from other Gmail users (or non-Gmail users) that I receive indirectly.


--
Help: /helpcenter
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


Re: Help figure out DMARC failure

 

@Mark Berry,
The problem with setting SPF to use that single IP is that there are actually two?addresses listed in the GIO SPF and they are subject to change. Using the "include" statement avoids the need to monitor and stays up-to-date automatically.

The current GIO SPF is:
? ? "v=spf1 ip4:66.175.222.12 ip4:66.175.222.108 include:mail.zendesk.com include:smtp.zendesk.com ~all"
Yes, it includes zendesk, too, but I don't have a problem with that at all.

Also, @Mark Berry, it is all but certain that spammers are using your domain now, judging by those counts. I am very confident it has nothing to do with GIO whatsoever.

I strongly recommend using?"p=reject" and "pct=100" as well as "adkim=s" and "aspf=s" to alert receivers accordingly. They still have the option of passing it and flagging it as spam but this is the only real defense available to you because SPF and DKIM are simply not enough, alone or together.

@Shal Farley, I'm using "p=reject" intentionally because I am much more interested in stopping spammers using our domains to the maximum extent possible. I would rather deal with any resulting issues but have had none so far. I included the GIO SPF in our SPF.? No one else should be sending email on our behalf at this time. If that changes, I will make adjustments as necessary.

FYI, our SPF is:
? ? "v=spf1 +a +mx +include:spf.protection.outlook.com +include:groups.io -all"
In case anyone is wondering, the "+" signs create an implicit statement because I have learned you cannot always rely on defaults. See .

Our DMARC is:
? ? "v=DMARC1; p=reject; sp=reject; pct=100; adkim=s; aspf=s; rua=[redacted]"

There does seem to be another problem, however, that may be exacerbating the problems experienced by Mark Berry!

I am finding that the DKIM Signature Body Hash generated by GIO is failing on two (other than Valimail) testing sites that can perform DMARC, DKIM and SPF checks against GIO headers.

I used MxToolBox () and AppMailDev () on quite a few emails received via?O365?and on?Gmail?and, even though both O365 and Gmail shows "dkim=pass" in the "Authentication" section, they all failed during testing.

So, I then tested emails from Capital One, Cisco, AT&T, etc., and they all failed DKIM as well. That's a real problem! It leads me to believe DKIM checking may be faulty on both testing sites and perhaps on Valimail, as well, so I will be considering third-party "header check" results as "unverified" or "questionable" going forward.

For the time being, I will only treat DMARC reports as valid since they are sourced directly from receiving mail servers.
--
Jim


Re: Photos and attachments

 

On Sat, Aug 8, 2020 at 10:13 PM, Larry McDavid wrote:
it is easy to enter many special characters that are not on the standard computer keyboard, using both Windows and Apple computers.

Unless it¡¯s windows laptops, no Num pads.?

It kills me not being able to enter a null character sometimes, when a space doesn¡¯t make it in certain situations/software.?


Re: Email and Bounce probes timeout #bouncedemails

John Pearce
 

Not sure if this will help but months ago I saw a problem with a member of our group that also referenced i/o timeout.? The issue in that case was the member was having his gmail address subscribed to the group automatically forward email to another address.? There was a problem (member never explained the problem) with the address being forwarded to.

John P