Fedora project email aliases still a thing?

Project Discussion
1

Are the Fedora project email aliases still a thing? I setup one a long time ago when we were still using FAS. But FAS is discontinued now, the new accounts.fedoraproject.org doesn’t seem to offer this option. Or it’s transparent based on the email address you provide there?

In any case, my alias doesn’t work anymore. I get an SPF error from the Fedora project mail servers. I suppose because my domain is not included in their allowed recipients? I find SPF warnings often a bit cryptic.

The log below is from my own mail server. Where sender.com is het domain where I sent the email from to my fedoraproject.com address, this alias expands into username+dev@mydomain.com (which is the domain managed by my mail server).

aug 29 16:20:16 hostname postfix/smtpd[31660]: connect from bastion-iad01.fedoraproject.org[38.145.60.11]
aug 29 16:20:17 hostname postfix/smtpd[31660]: Anonymous TLS connection established from bastion-iad01.fedoraproject.org[38.145.60.11]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
aug 29 16:20:18 hostname policyd-spf[31666]: 550 5.7.23 Message rejected due to: SPF fail - not authorized. Please see http://www.openspf.net/Why?s=mfrom;id=username@sender.com;ip=38.145.60.11;r=<UNKNOWN>
aug 29 16:20:18 hostname postfix/smtpd[31660]: NOQUEUE: reject: RCPT from bastion-iad01.fedoraproject.org[38.145.60.11]: 550 5.7.23 <username+dev@mydomain.com>: Recipient address rejected: Message rejected due to: SPF fail - not authorized. Please see http://www.openspf.   net/Why?s=mfrom;id=username@sender.com;ip=38.145.60.11;r=<UNKNOWN>; from=<username@sender.com> to=<username+dev@mydomain.com> proto=ESMTP helo=<bastion.fedoraproject.org>
aug 29 16:20:18 hostname postfix/smtpd[31660]: disconnect from bastion-iad01.fedoraproject.org[38.145.60.11] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8

Switching to a Gmail address doesn’t change anything it seems. So I guess the mail aliases are discontinued/broken?

2

Yes, aliases are still provided to any users in at least one group. If you are in at least one group an alias is transparently added for you pointing username@fedoraproject.org → your email address in the account system.

SPF doesn’t handle this case well at all, which is why our SPF record has a ?all at the end, which means “Neutral (e-mails are expected to be accepted)”. But if your domain you are sending from has a SPF record with -all, recipients will see it coming from fedoraproject.org servers and reject it. That seems like whats happening here.

If you send from ‘username@fedoraproject.org’ it should, in general work…

Hope that helps.

4 Likes
3
  • ?, question mark, makes the whole record inactive, as though the domain had no SPF record at all.

Is what I read here. That’s not really what I want :slight_smile: Isn’t there a way to only allow the fedoraproject.org?

4

You could add a ‘include:fedoraproject.org’ but I guess that would copy our ?all in there. So, You could just copy what we have in the fedoraproject.org spf record without the ?all

1 Like