Defect #29028
closed
Redmine generates notification emails that fail DMARC and will therefore often be rejected or quarantined
Added by Jonathan Kamens almost 6 years ago.
Updated almost 6 years ago.
Category:
Email notifications
Description
I am one of the email administrators for my employer, Quantopian Inc. In particular, I am one of the people responsible for ensuring that all the emails sent from our domain are compliant with DMARC so they won't be quarantined or rejected.
I recently filed an issue about Ruby at https://bugs.ruby-lang.org/. Immediately after doing so, I received several DMARC failure reports resulting from the notifications about my new issue that were emailed out. This is because Redmine put "From: jkamens@quantopian.com" in the header of the notification emails.
That's really not OK in the age of DMARC. That's going to cause notification emails to be quarantined (i.e., put in the user's spam folder) or rejected, whenever the issue author's email domain has as quarantine or reject email policy and the notification recipient's mail server enforces DMARC.
Most of the big email providers nowadays publish and enforce DMARC policies.
Interesting. In response to filing this issue, I received a notification from redmine.org which did not put "From: jkamens@quantopian.com" in its header. Instead, it had "From: noreply@redmine.org".
I don't know whether this is because the notifications I got DMARC failure reports about earlier were for a different kind of notification, or because the problem here isn't Redmine but rather something specific to bugs.ruby-lang.org, or maybe because bugs.ruby-lang.org is running an older version of Redmine and this issue is already fixed in the current version?
In short, maybe this is something I need to take up with the ruby-lang.org folks?
Can you shed any light? Thanks.
I think we can test this by a quick reply on your problem. If everything goes well you should have received an email right after I've clicked on OK. So you can check whether it's compliant or not.
The email notification I got about your comment correctly comes from noreply@redmine.org.
I guess that means that whatever the problem is, I need to take it up with the folks who maintain bugs.ruby-lang.org?
- Status changed from New to Resolved
- Status changed from Resolved to Closed
- Resolution set to Invalid
Also available in: Atom
PDF