Last modified: 2014-09-17 08:50:22 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T58414, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 56414 - Get mail relay out of Yahoo! blacklist: apply to Yahoo for whitelisting bulk mail
Get mail relay out of Yahoo! blacklist: apply to Yahoo for whitelisting bulk ...
Status: NEW
Product: Wikimedia
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: High major (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on: 46640 62704 56413
Blocks: 52915 59731
  Show dependency treegraph
 
Reported: 2013-10-31 08:19 UTC by Nemo
Modified: 2014-09-17 08:50 UTC (History)
14 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Nemo 2013-10-31 08:19:54 UTC
X-YahooFilteredBulk: 208.80.152.133

(from https://en.wikipedia.org/?oldid=579580929#WMF_notification_email_marked_as_spam_by_Yahoo )

According to several comments, this means that our mail is currently blacklisted by Yahoo!, so it's sent in the "Bulk" folder for users who have it enabled (if not to spam?). WMF needs to send a "Bulk sender application for whitelisting" http://help.yahoo.com/kb/index?page=content&id=SLN9042 but first their guidelines have to be respected: http://help.yahoo.com/kb/index?y=PROD_MAIL_ML&page=content&id=SLN3435

There are several things in there that we don't do; let's add each of them to blockers when we're sure there's something to do.
* "Use email authentication such as DKIM": low-hanging fruit, let's do it as soon as possible (bug 56413).
* "Be CAN-SPAM compliant": it's USA law, I assume we're respecting it. :) It seems very lenient, from a quick skimming we're ok. http://business.ftc.gov/documents/bus61-can-spam-act-compliance-guide-business
* "Consistently manage your lists": no idea, but MediaWiki surely doesn't remove/disable addresses which bounce: I remember Brion mentioning this in some 2005 bug comment or something like that, I don't know if there's an open bug but I'd say it's something worth doing. 
* "Segregate your mail streams by IP address and/or domain": in theory we do, I can't judge if well enough.
* "Using your domain consistently": no idea, is it consistent to send from wiki@wikimedia.org but then use @wikipedia.org, @mediawiki.org and so on to From headers etc.?
* "Publish reverse DNS (PTR) records for your sending IPs": looks ok.
$ dig -x 208.80.152.133
;; ANSWER SECTION:
133.152.80.208.in-addr.arpa. 3552 IN    PTR     wiki-mail.wikimedia.org.
* "Secure your mail servers": I hope so.
* "Use common-sense settings": it would be nice to track this (Ori, do you know something?), but Echo sends only few thousands notifications per day on en.wiki (https://toolserver.org/~dartar/en/echo/ ) and standard enotif (talk and watchlist) on all wikis is probably only one or two order of magnitudes bigger, it's still a ridiculously low amount of emails, we're not DoS'ing Yahoo!. It's possible that we have peaks, for instance an edit to a heavily watchlisted pages could cause a peak of thousands enotifs in a single second, but I doubt it's relevant. When we enabled enotifwatchlist on all wikis, the increased network activity of mchenry wasn't even visible at all in ganglia.
Comment 1 Daniel Zahn 2013-10-31 18:20:52 UTC
RT tracking: https://rt.wikimedia.org/Ticket/Display.html?id=6151
Comment 2 Tim Landscheidt 2013-12-28 14:33:56 UTC
What's the status of the RT?
Comment 3 Andre Klapper 2014-01-02 10:40:47 UTC
(In reply to comment #2)
> What's the status of the RT?

No activity, and no owner set.
Comment 4 Cyberpower678 2014-02-01 23:29:04 UTC
I have upped the importance, because these delayed emails are causing major issues, and mailman is stalling as a result.  Just 2 days ago, when mailman kicked back up, I received a flood of almost 50 emails from various lists.  Please get this fixed ASAP.  I don't want to listen to music and have my email client make incoming mail noises 47 times during one song.
Comment 5 Alex Monk 2014-02-01 23:29:20 UTC
What's the status of the RT now?
Comment 6 MZMcBride 2014-02-02 06:22:01 UTC
(In reply to comment #4)
> I don't want to listen to music and have my email client make incoming mail
> noises 47 times during one song.

Whether it's IRC pings or SMS dings, a happier life is quieter things. :-)
Comment 7 Andre Klapper 2014-02-03 13:41:05 UTC
Need to find out which exact guidelines are violated.

(Re comment 4: I rather recommend to fix your email client.)
Comment 8 Andre Klapper 2014-02-03 13:45:41 UTC
Uhm, I hadn't realized this is blocking bug 59731. I'm sorry; resetting to high priority again.
Comment 9 Cyberpower678 2014-02-09 01:37:17 UTC
Updates?
Comment 10 Cyberpower678 2014-02-09 01:38:02 UTC
My email client flooded again just now and a few hours ago.
Comment 11 Cyberpower678 2014-02-09 01:44:40 UTC
(In reply to comment #10)
> My email client flooded again just now and a few hours ago.

https://ganglia.wikimedia.org/latest/?r=custom&cs=02%2F08%2F2014+23%3A00+&ce=02%2F09%2F2014+02%3A00+&c=Miscellaneous+eqiad&h=sodium.wikimedia.org&tab=m&vn=&hide-hf=false&mc=2&z=medium&metric_group=ALLGROUPS

the exim_queued_messages graph seems to support that.
Comment 12 Cyberpower678 2014-02-09 01:51:27 UTC
I'm seeing this issue getting worse, and there is nothing more annoying than leaving for 15 minutes and coming back to a flooded inbox, containing newly received emails sent from as far back as 7 days ago.  This is also blocking another bug where sodium tends to fail to send messages as a result of this.  I have therefore upped this bug's severity to blocker.
Comment 13 Tim Landscheidt 2014-02-09 04:45:43 UTC
Please read [[mw:Bugzilla/Fields#Severity]] before changes.  Apparently mail is not lost, but just delayed.
Comment 14 Cyberpower678 2014-02-09 05:23:02 UTC
(In reply to comment #13)
> Please read [[mw:Bugzilla/Fields#Severity]] before changes.  Apparently mail
> is
> not lost, but just delayed.

Well in that case restoring to what it was.
Comment 15 Cyberpower678 2014-02-12 02:11:16 UTC
Any updates?  I'm getting really close to unsubscribing.
Comment 16 Nemo 2014-02-12 06:39:09 UTC
(In reply to comment #15)
> Any updates?  I'm getting really close to unsubscribing.

Did you write to Yahoo!'s customer service too, out of curiosity? If you can do something without WMF, just do it!
Comment 17 Cyberpower678 2014-02-12 12:21:18 UTC
I tries clicking contact us and I just went in circles.
Comment 18 Nemo 2014-02-12 12:32:09 UTC
You should see my ISP's! It's easy: https://io.help.yahoo.com/contact/index?page=contact&locale=en_US&y=PROD_MAIL_ML -> Sending and receiving messages (last) -> Unable to receive messages (third last) -> Email
Comment 19 Nemo 2014-02-12 12:58:35 UTC
Note however that nowadays it's easier to receive support from email providers on Twitter, I see they're very active there: https://twitter.com/YahooCare

You can also do some lobbying on their uservoice board; the only relevant topic I found is https://yahoo.uservoice.com/forums/210695-yahoo-mail/suggestions/5361666-final-solution-to-prevent-spam which proposes to whitelist wikipedia.org among other things.

And of course I assume you went through https://help.yahoo.com/kb/mail/SLN3517.html
Comment 20 Andre Klapper 2014-04-11 19:29:48 UTC
On a related note, I just ran into German article about the problems of people with a Yahoo mail account on http://www.heise.de/newsticker/meldung/DMARC-Policy-Yahoo-killt-Mailinglisten-Mitgliedschaften-2168857.html (and Google Translate to English pretty much works).
For the records, Mailman 2.1.16 (which will be in Ubuntu Trusty) allows setting "FROM_IS_LIST=yes" to "replace the sender with the list address to conform with policies like ADSP and DMARC".
Comment 21 Nemo 2014-04-11 19:34:26 UTC
(In reply to Andre Klapper from comment #20)
> On a related note, I just ran into German article about the problems of
> people with a Yahoo mail account

That's a new thing though, technical explanation at http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html
Comment 22 Seb35 2014-04-30 15:11:43 UTC
I currently study the Yahoo and AOL’s recent change to DMARC, and the problem is pretty different than the one described here, basically because this one doesn’t relay emails (as do a mailing list) but sends original mails.

Possibly it could be implemented DMARC(+DKIM+SPF) on wikimedia.org to improve delivrability for this bug, *BUT* this could lead to heavy consequences on other @wikimedia.org emails (like non-delivery) so it must be carefully thought before action.
Comment 23 Nemo 2014-05-03 12:48:03 UTC
(In reply to Nemo from comment #21)
> (In reply to Andre Klapper from comment #20)
> > On a related note, I just ran into German article about the problems of
> > people with a Yahoo mail account
> 
> That's a new thing though, technical explanation at
> http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html

That was split to bug 64795.
Comment 24 Nemo 2014-07-03 16:32:47 UTC
Bug 56413 was fixed, so I'm told this is currently waiting for bug 46640 and mailman 2.1.17+ (for MediaWiki mailer's and mailman's IPs respectively).
Comment 25 Andre Klapper 2014-09-17 08:50:22 UTC
*** Bug 70930 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links