Re: [gentoo-user] OT: looking for email provider

[Mick]

Just to add the headers fail the DMARC checks, as I noticed in Jack's message:

ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: domain of gentoo-user+bounces-189351-
michaelkintzios=gmail.com@l.g.o designates 208.92.234.80 as 
permitted sender) smtp.mailfrom="gentoo-user+bounces-189351-
michaelkintzios=gmail.com@l.g.o";
       dmarc=fail (p=QUARANTINE sp=NONE dis=NONE) header.from=sourceforge.net

but still forwarded following Jack's manual verification.

On Sunday, 2 February 2020 11:27:35 GMT Mick wrote:
> On Saturday, 1 February 2020 22:08:37 GMT Jack wrote:
> > Relying on the collective experience and advice of the group here.
> >
> > As may be obvious to many of you, the address this message is sent from
> > "...@×××××××××××××××××.net" isn't really a fully functional address.
> > Email sent to that address will be forwarded by the sourceforge system
> > to a personal address I specify.  When I send a message "From: " that
> > address, however, I cannot send it through the sourceforge system, as I
> > don't actually have an email account with them.  Currently, I send it
> > through my gmail account.  That works because I added that address in
> > my gmail Settings under "Accounts and Import" /  "Send mail as:".
>
> This message sending mechanism is using an email address "alias".  It used
> to be a simple exercise of setting up as many different aliases you wanted
> and then being able to send messages with a From: field, as whoever you
> wanted to show up being the sender of the message in your recipients Inbox.
>  The forwarded message retains in its headers the original SMTP envelope
> sender and recipient addresses, but if you used Bcc: to direct it to a
> recipient the message headers could be less revealing of the path used to
> send the message. depending on the particular mail server implementation.
>
> It is easy to guess spammers soon cottoned onto the fact they could send
> their adverts for products most of us do not need and immediately used this
> method to spam the world from "Mr. Viagra" and what have you.
>
> For this reason email ISPs introduced a number of 'email address
> verification' hoops you have to jump through, to be allowed to use a
> different email alias through their SMTP servers.
>
> > To
> > set it up, gmail sends a message to that address, and I click on a link
> > in the message to prove it does come to me.  That's been working find
> > for a long time, but, ...
>
> This is an alias address verification method.  You have to show you have
> control of that domain/email address, rather than being a spammer exploiting
> this method.
>
> Despite all this spammers are still getting through.  So, alternative
> technologies have been invented (SPF, DKIM, DMARC)[1] to make sure the
> sender is legitimate, identifiable and is only allowed to use their own
> domains.
>
> [1] https://dmarc.org/
>
> > I'm trying to move away from gmail.  Especially for mailing lists like
> > this one, if I send a message to the list, I never see that I get the
> > message from the list, because gmail refuses to show it in my inbox
> > because it's a duplicate of a message already in my sentbox.
>
> I think you can use Filters and Labels[2] in Gmail to tag and then move
> whatever you receive/send into a folder you define.
>
> [2] https://support.google.com/mail/answer/118708
>
> > I do have an email account with privateemail.com (thorough
> > namecheap.com) but they are unable or unwilling to have a similar
> > setup.  I'm not even sure they actually understand what I'm asking of
> > them, but I've wasted more than enough time trying.
>
> You could try using the terms "email alias address" and "Send As" with them
> to see if this allows your conversation to progress further.
>
> Many ISPs are a marketing shop buying the email service backend from one of
> the big email suppliers, e.g. Google, AWS, etc.  Such marketing shops
> without commensurate technical capabilities are only a step away from
> having spammers associated with their service and therefore keep features
> down to a minimum to avoid being blacklisted due to potential
> misconfigurations.
>
> > So - I'm asking if anyone can recommend an email service provider that
> > understands this and will let me set it up.  I have my own domain, but
> > namecheap.com does seem willing to have the appropriate DNS record
> > point to a different email provider.  At this point, I'm not interested
> > in running my own email server.  I currently only need two mailboxes,
> > maybe a small number more in the future, but this is personal, not
> > commercial.  I don't need to do bulk emails, maybe up to a dozen or so
> > recipients.  I do NOT expect it to be free, but cost is at least some
> > consideration.  I don't need huge storage limits, as although I use
> > IMAP access when on the road, when I'm home, I use POP3 to download
> > everything.  I'd also like at least minimal control over spam
> > filtering, mainly to let almost anything through for me to filter
> > locally.  If privateemail.com has false positives for everything from
> > some sender (such as ups.com, for example) I need to open a ticket with
> > them to add a whitelist.  No such thing as clicking on "Not spam" and
> > apparently no intent to ever do so.
> >
> > Thanks for any suggestions.
> >
> > Jack
>
> I can't make any recommendations for email ISPs.  There are a huge number of
> them marketing their services, some offering only email services, others
> include website hosting and data storage for the same price.
>
> I also use Google for mailing lists et al.  I have been thinking of moving
> away from this capitalist surveillance service, whereby the email service is
> free, but your data privacy is sold to the highest bidder, while Google
> keeps all the margin.  Although the concepts of privacy plus Internet are
> somewhat orthogonal.  I'll eventually get around to it, so please post what
> you come up with in case it suits me too.


-- 
Regards,

Mick