It might be worth talking to the folk at FastMail. They are pretty active in the mail security standards. I use them for my mail. https://www.fastmail.com/about/company.html wunder Walter

Honestly not sure what, if anything, to do with SPF and DKIM. Seeing plenty of valid emails with bad DKIM sigs, for example. Mark

Received from Mark Fletcher at 8/23/2018 05:09 AM UTC: Don't bounce! REJECT during the SMTP transaction if possible. And if not possible, then just blackhole it. For viruses I'd prefer deletion.

I am 100% in favor of reject and not bouncing. If you want more info - read on here: http://www.dontbouncespam.org/ -- Gerald

I would lean toward dropping rather than bouncing spam/malware/phishing, just because the system on the other end might misclassify groups.io as the source of the malware. If you do bounce it for

How likely is it that a clean message will be identified as infected? We aren’t talking about spam which is identified on the basis of words used, etc. Right? If the messages are being scanned for

Hi Mark, Reject (5xx) during inbound SMTP-session. At least give moderators the option to silence false positives which are inevitable, especially about phishing. -- Lena

Dave, Keep in mind this isn't about simple spam. This is about content which may be malware-infected or a phishing attempt. Detecting these specific things is likely to be much less prone to false

Mark, Given that the sender passed a reverse-DNS I'd say it is safe to bounce it back. Chances are the message was sent by a compromised account at an otherwise legit service. (And maybe the

I take it this has not been implemented yet Mark, I see no options for dealing with spam other than the existing ones under 'spam control' for which in our case 'restricted membership' is the only

Ok, so new group option for dealing with spam: either moderate or reject, with reject being the default. Rejected messages will be logged in the activity log. If I reject a message, should it bounce

Agree with Shal on this. An email reflector like groups.io, is a multiplier-- it turns a single email into many emails. Cybercriminals love this. Send out a malevolent email to a single address and,

Mark, "Block" = "Drop" or "Reject"? Drop is a very severe action, and I'm not entirely sure it should be done even with non-subscribers. With subscribers at the least I'd recommend "reject" (and add

I don't expect scanning to change anything here for me since my groups use plain text and no attachments in the first place. Actions? Perhaps DROP ALL and DROP ATTACHMENT ONLY should be available...

Ellen Moody <ellen.moody@...> wrote: UTC - Co-ordinated Universal Time. Pretty much the same as GMT. West coast USA is GMT-8 (-7 in summer) and East coast is GMT-5 (-4 in summer). --

I confess to not knowing where this main forum is. I also am unaware that I have any software called a timezone. I'm one of those who when confronted with centigrade temperatures doubles the number

Mark, Yes scanners can catch spam/phish/malware, the trouble is that virus scanners are tuned for high detection rate because any one choosing a virus scanner will invariably choose the one with

Ellen, Planned outages are posted as events on the calendar in the Beta/Main forum. If you have your timezone configured correctly (Account -> Preferences), when you view the calendar and hover over

Chris, Hopefully these will be activity logged like any other rejection. Shal

Hi Mark, My questions are: Will the Owners/Moderators know that a message was blocked? Will we know how many are blocked each day? When will it start? Yahoo blocked messages and never