Ask HN: Trying to be more Gmail-independent with Gandi and email forwarding

Re:Ask HN: Trying to be more Gmail-independent with Gandi an... by Samon on Monday January 21, 2019 @08:33PM (#18965254)

Here's the relevant headers from a recent email from Apple, including the Authentication-Results and Received-SPF lines:

  Delivered-To: (ME)@gmail.com
  Received: by 2002:a9d:650d:0:0:0:0:0...
  Received: from sender-of-f72.zoho.com (sender-of-f72.zoho.com. [135.84.80.227]) by mx.google.com...
  Received-SPF: pass (google.com: domain of (ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN) designates 135.84.80.227 as permitted sender) client-ip=135.84.80.227;
  Authentication-Results: mx.google.com;
       dkim=pass [email protected] header.s=id0517 header.b=S5Hlyy1T;
       spf=pass (google.com: domain of (ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN) designates 135.84.80.227 as permitted sender) smtp.mailfrom="(ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN)";
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=id.apple.com
  Received-SPF: pass (zoho.com: domain of email.apple.com designates 17.151.1.66 as permitted sender) client-ip=17.151.1.66; [email protected]; helo=nwk-txn-msbadger0405.apple.com;
  Authentication-Results: mx.zohomail.com;
	dkim=pass;
	spf=pass (zoho.com: domain of email.apple.com designates 17.151.1.66 as permitted sender)  [email protected];
	dmarc=pass(p=reject dis=none)  header.from=id.apple.com
  Received: from nwk-txn-msbadger0405.apple.com (nwk-txn-msbadger0405.apple.com [17.151.1.66]) by mx.zohomail.com...

  From: Apple <[email protected]>

[ Parent | on HN ]

Re:Ask HN: Trying to be more Gmail-independent with Gandi an... by deanmoriarty on Monday January 21, 2019 @08:57PM (#18965395)

Thanks, really appreciate you taking the time to extract those headers, very helpful.

Looking at the headers, it seems clear that the Zoho mail server does something different when forwarding the message: it also sets some parts of the headers (like smtp.mailfrom) to instruct the recipient mail server that the mail is sent from your email address, and not really from @id.apple.com. Google then validates not @id.apple.com, but (ME)+aml_=(MY DOMAIN)=gmail.com@(MY DOMAIN), which makes it work.

I will ask Gandi support.

Edit: after doing some research, it appears Zoho is implementing SRS (http://www.openspf.org/SRS) as the diagrams in the web page show, whereas Gandi is not. I just learned a new thing!

Thanks again.

[ Parent | on HN ]

Re:Ask HN: Trying to be more Gmail-independent with Gandi an... by Samon on Monday January 21, 2019 @10:08PM (#18965696)

I've just learned something too :)

I've known for years it "just works", but now I know why :D

[ Parent | on HN ]