Hacker News new | ask | show | jobs
by drewp 29 days ago
I accept mail from the wild and reject bad SPF or bad DKIM.

It seems like something happened around 2026-05-01 (https://bigasterisk.com/post/delivered-email-rate-2026.png) where it became easier for spammers to make technically legitimately deliverable mails. Or my postfix is setup wrong.

Note "spf=pass" and "dkim=pass" in these headers:

  Return-Path: <walmartpoints@liftstores.com>
  X-Original-To: drewp@bigasterisk.com
  Delivered-To: drewp@bigasterisk.com
  Authentication-Results: prime; spf=pass (sender SPF authorized)
     smtp.mailfrom=liftstores.com (client-ip=103.176.193.110;
     helo=atompoint.bikerspage.com;
     envelope-from=walmartpoints@liftstores.com; receiver=<UNKNOWN>)
  Authentication-Results: bigasterisk.com;
      dkim=pass (2048-bit key; unprotected) header.d=liftstores.com header.i=walmartpoints@liftstores.com header.a=rsa-sha256 header.s=mtacsacc60r7j header.b=Ntcr2+R1;
      dkim-atps=neutral
  Received: from send1.liftstores.com (atompoint.bikerspage.com [103.176.193.110])
      by bigasterisk.com (Postfix) with ESMTP id D58B21A209B
      for <drewp@bigasterisk.com>; Fri, 15 May 2026 17:44:55 -0700 (PDT)
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mtacsacc60r7j; d=liftstores.com;
   h=To:Reply-To:MIME-Version:From:Content-Type:List-Unsubscribe:Subject:
   Message-ID:Date; i=walmartpoints@liftstores.com;
   bh=2MNA1dmylVOMnvzWVYrwOi/6KCaFtBhIq3AtC5UbTrQ=;
   b=Ntcr2+R1Rvjce4/DYtKkfN6xtaBdKWawc/vcWU72jUBePh...