From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.8 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C40ACC2B9F4 for ; Mon, 28 Jun 2021 16:20:32 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 253DF6144E for ; Mon, 28 Jun 2021 16:20:32 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 253DF6144E Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 09C4A8D0061; Mon, 28 Jun 2021 12:20:31 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 04CC68D0016; Mon, 28 Jun 2021 12:20:31 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id E2ED18D0061; Mon, 28 Jun 2021 12:20:30 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0241.hostedemail.com [216.40.44.241]) by kanga.kvack.org (Postfix) with ESMTP id C2BEE8D0016 for ; Mon, 28 Jun 2021 12:20:30 -0400 (EDT) Received: from smtpin25.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id B33838249980 for ; Mon, 28 Jun 2021 16:20:30 +0000 (UTC) X-FDA: 78303645420.25.4E92435 Received: from mail-qt1-f174.google.com (mail-qt1-f174.google.com [209.85.160.174]) by imf08.hostedemail.com (Postfix) with ESMTP id 4F590801935A for ; Mon, 28 Jun 2021 16:20:30 +0000 (UTC) Received: by mail-qt1-f174.google.com with SMTP id r7so13922783qta.12 for ; Mon, 28 Jun 2021 09:20:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=U7fXfGjadiL8isA1UEbZJYGUjr2KdPxa22wtkL8fYR8=; b=pV/7OfUk02PcQ9bRleE0yLppYhvY69BgBt3SYvAB8mVKwWVMQTt06R5K+RJBTaIa1b AO8oZ8+tFiC/covbKoFFlk4EKvVS/69aQChB4/LTkWHpmfJwYlFLRYvHxwSd3nN3lXr9 X2OkcJFRvQCDfJIqAc1FRBF7rI/cagrbGCIYTFW6pt7tV3HW+we7cKBrFajqi1xzD7uS 8iyg4Vl3R24D2FA+RkQgX4zZlr5g9D28gZZnLkh3+VcIW0ynNfXJpwZOoXhLoBpq+N91 Mr1Mo92oJq3BEVbQRQFgw1S+LRzCj1U6hPfjQ5CWrLI1FF+D2iUPUKuJNHTatFmE6VM3 k36A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=U7fXfGjadiL8isA1UEbZJYGUjr2KdPxa22wtkL8fYR8=; b=VDqKFSz3PakgFSCxHB84G/y7naFRv9FI9bLA2mgmEFC17v8Jior//nVF7A8Y/gItSd BxOI+cgaKdUrgY9TY90KTcZf/7V/PGtKxNG4xmBSZDiiMGoGLfUnSKckViPJnzK+C453 5vXlZ7xrwyTwc2ZgqXX1d/dEteEjrMODgNzkFiYb3Dm7GDHC+57s1eTSgnIbEKMbry/8 MNV3TniYTwm2FP+i/IwsZ0GKiqcLMBF0jo2FgKMTChefNch+YFq1/E0+4bBUHPVdo1Mt 7arzOzw5kQpr+Ejarm59o90dtFYfo5Bnr1Z/ic2Q7aSYM2+u9Ex4F/BQoO4Xfvf1uVjY cwJA== X-Gm-Message-State: AOAM531/z+8pBjt4FMIEqm4cnl/5jzZyUfvvyEOaXpvafEHSh865n+rK CZJaJu/ON1edJvNeGlDpUjHk/A== X-Google-Smtp-Source: ABdhPJz9oN20ohmo1SYUNEJ984SoicNirF9kNToTI6f84nkXK3d/W9hgY6gqGE1GH+r5u9CFQGCmSg== X-Received: by 2002:a05:622a:14d3:: with SMTP id u19mr22192270qtx.115.1624897229575; Mon, 28 Jun 2021 09:20:29 -0700 (PDT) Received: from ziepe.ca (hlfxns017vw-47-55-113-94.dhcp-dynamic.fibreop.ns.bellaliant.net. [47.55.113.94]) by smtp.gmail.com with ESMTPSA id t139sm10262947qka.85.2021.06.28.09.20.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Jun 2021 09:20:28 -0700 (PDT) Received: from jgg by mlx with local (Exim 4.94) (envelope-from ) id 1lxtzn-000emj-68; Mon, 28 Jun 2021 13:20:27 -0300 Date: Mon, 28 Jun 2021 13:20:27 -0300 From: Jason Gunthorpe To: Benjamin LaHaise Cc: James Bottomley , linux-mm@kvack.org, linux-kernel@vger.kernel.org Subject: Re: linux-mm@kvack.org - limping on a backup Message-ID: <20210628162027.GC4604@ziepe.ca> References: <20210622145954.GA4058@kvack.org> <214c41fae1f1b148e5b04a58c1b018fb091d7e83.camel@HansenPartnership.com> <20210625171259.GG4058@kvack.org> <6f309c63f5b7be968ae679e81ab959db05681e8a.camel@HansenPartnership.com> <20210625192607.GH4058@kvack.org> <20210628134607.GA4604@ziepe.ca> <20210628135352.GL4058@kvack.org> <20210628142659.GB4604@ziepe.ca> <20210628144051.GM4058@kvack.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210628144051.GM4058@kvack.org> X-Rspamd-Server: rspam05 X-Rspamd-Queue-Id: 4F590801935A X-Stat-Signature: na5qh63u7s6sazdbhsgwgc191s67x8x8 Authentication-Results: imf08.hostedemail.com; dkim=pass header.d=ziepe.ca header.s=google header.b="pV/7OfUk"; dmarc=none; spf=pass (imf08.hostedemail.com: domain of jgg@ziepe.ca designates 209.85.160.174 as permitted sender) smtp.mailfrom=jgg@ziepe.ca X-HE-Tag: 1624897230-560222 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Mon, Jun 28, 2021 at 10:40:51AM -0400, Benjamin LaHaise wrote: > On Mon, Jun 28, 2021 at 11:26:59AM -0300, Jason Gunthorpe wrote: > > Isn't a 7-bit conversion what I pointed at last time we talked about > > this? > > I changed several options in postfix last time this was raised, but as > nobody ever provided a test case, I had no way of knowing if it worked or > not. I've been using a script like this against the lore public inbox git repos to monitor my own domain's dkim cleanness and interaction with list serves: #!/usr/bin/python3 import subprocess import collections # Starting points start = XXXXX # git commit id string emails = collections.defaultdict(list) commits = subprocess.check_output(["git","log","master","^" + start,'--pretty=format:%H %aN <%aE>']).decode() for ln in commits.splitlines(): commit,_,email = ln.partition(' ') if "nvidia.com" in email.lower(): emails[email].append(commit) fails = set() not_empty = True; while not_empty: not_empty = False; for email,commits in sorted(emails.items()): if email in fails or not commits: continue commit = commits[-1]; del commits[-1] if commits: not_empty = True; msg = subprocess.check_output(["git","show",commit + ":m"]); try: subprocess.check_output(["dkimverify"], input=msg); #print(email) except: fails.add(email) print("Failed!", email, commit) It has taken a lot of doing, but nvidia.com is now effectively DKIM clean through vger. You could run with with some known-good domains like nvidia.com, facebook.com, google.com, to measure kvack's activity. Failures can often be cross-correlated against a vger list and then you can do A/B comparison to guess what is wrong. > spec that ignores decades of that philosophy at the IETF. And even if a > DKIM signature passes, that's still not enough to trust the resulting > email. All it does is ensure that a small subset of valid emails get > dropped on the floor. This doesn't seem like an overall win. I have no idea. It is here, people beyond us have made this decision, we have to work within it. DMARC is ratcheting this up and is moving to say if DKIM fails then emails should be discared. Jason