From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from out0.migadu.com ([94.23.1.103]) by ewsd; Mon Sep 21 18:32:48 EDT 2020
Message-ID: <DB9CB61D16FAD42ABDE587820A830C83@a-b.xyz>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=a-b.xyz; s=key1;
	t=1600727560;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:  in-reply-to:in-reply-to;
	bh=yzBFEgBmOEW1nYzInxe2waUve136CoPyG0STcDr/ECM=;
	b=ql06WxJBmN3W9p5OhVscJtDS+k0sjk4Kru/VW9FPf+mKjrd7kBbIOlAT52YJn8AshsivDQ
	ah6fdcdmdAZc4hU7YlMkp/gyBOgTOfy7O9BNEGzlSs9YXz+ZnQJ7awlicStZdwLQNwtVBW
	KanWEsHBMhH3yUQyeQqDpQw8w8hcMwue96h67SBD/O7Y5MXEpsLmNls3r71teXpczQF0gK
	uC/Tr4BXJKkYlFC9XnL6aFkzaG47cJ9FoOH2uEgR1R8xp4VCrEj2X9wpwQSf0LbkzL0jCd
	Svjg8r5PqRmU1aVLSWGi3WrVbtLgs4iVx0tBZuwmNIR0mNMvbxzxQ8/b9Od5aA==
To: 9front@9front.org
Subject: Re: *****SPAM***** [9front] test
Date: Tue, 22 Sep 2020 00:32:38 +0200
X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers.
From: kvik@a-b.xyz
In-Reply-To: <20200921215743.GF43872@wopr>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Spam-Score: -0.10
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: reduce/map just-in-time-based interface 

> IMO the 'suspicious ntld' rule is egregious, and the only thing that you
> (kvik) should care about is fixing the server ident -- I think your
> system is identifying itself during SMTP handshake as 'a-b.xyz' when it
> should be identifying as 'ten.a-b.xyz' and nothing else should need to
> change.

Thanks, very valuable info.

What's confusing to me is how any of my systems, ten.a-b.xyz in
particular, come into this picture -- they have no part in the mail
business.

I'm paying Migadu to host all my mail, so I set up my clients with their
SMTP servers, and all the mail-related DNS records are pointed at their
servers exactly as instructed.  So, why does SA go check for a-b.xyz and
its rDNS?  Shouldn't it be doing that dance with Migadu's outgoing SMTP
server, and only getting the SPF info out of a-b.xyz to confirm?

I know nothing about mail anymore.