Change Details

Email were sent to a bunch of Wikimedia mailing lists specifying a forged sender address, which was accepted for delivery by the mailing list software despite the IP sending the email not being able to pass SPF check if such a check were made. Does the server or mailman do any sort of sender authentication before sending on emails using schemes such as SPF, DKIM, or DMARC as & if appropriate?

Email were sent to a bunch of Wikimedia mailing lists specifying a forged sender address, which was accepted for delivery by the mailing list software despite the IP sending the email not being able to pass SPF check if such a check were made. Example: {P5208} Does the server or mailman do any sort of sender authentication before sending on emails using schemes such as SPF, DKIM, or DMARC as & if appropriate?

Email were sent to a bunch of Wikimedia mailing lists specifying a forged sender address, which was accepted for delivery by the mailing list software despite the IP sending the email not being able to pass SPF check if such a check were made. Example: {P5208} Does the server or mailman do any sort of sender authentication before sending on emails using schemes such as SPF, DKIM, or DMARC as & if appropriate?