Skip to content Skip to site navigation Skip to service navigation

Mailman Security Changes

To align with industry standards, the Mailman service will be updated to ensure emails aren't rejected by recipient servers with strict DMARC (Domain-based Message Authentication, Reporting and Conformance) policies. DMARC is an email security protocol that authenticates emails to prevent spoofing and phishing attacks.

Before the Mailman update

Emails sent to recipient domains with strict DMARC policy are at risk of rejection, leading to disruptions and possibly member unsubscriptions from mailing lists due to high bounce rates. 

After the Mailman update

Mailman will replace the sender's email address with a list-specific address for emails sent to recipient domains with a strict DMARC policy.

  • Recipients may see a change in the “From” address if they use an external email service provider, like Google or Yahoo.
  • Emails sent to those using a stanford.edu address will not be changed.

Frequently Asked Questions

Do I need to do anything?

No. Mailman Service owners will handle the configuration globally ensuring seamless operation of the mailing list without requiring individual user intervention.

What is the change on Mailman?

The change on Mailman is to adhere to industry standards, ensuring that emails sent through the platform meet the required criteria for delivery. With this change, the mailing list software replaces the sender's email address with a list-specific address.

Why is this change necessary?

This change is crucial to ensure that emails sent via Mailman aren't rejected by recipient servers with strict email policies (specifically strict DMARC policy), thus maintaining smooth communication through the mailing list.

A strict DMARC policy basically says that no email can be forwarded with the original sender's “From” address except from email relay services/servers officially listed by the original email sender domain.

What is the impact if the change is not in place?

Without this change, emails sent through Mailman may face rejection by recipient servers. Additionally, list owners may observe automatic unsubscriptions of list members due to high bounce rates, disrupting the continuity of the mailing list.

How does it affect email filters?

We recommend you review mailman-related email filters and/or rules and adjust accordingly. 

Can the changes be overridden?

Yes, but it is highly discouraged. List administrators who want to request an override of the changes for their lists should submit a Help request.

How does the mail header look like before and after the change?

Before the change, when sending an email to a mailing list via Mailman, the recipient would see  your email address in the “From” field: 
From: Jane Stanford <jstanford@gmail.com>

After the change, the recipient will see a list-based address in the "From" field:
From: Jane Stanford via group-list <group-list@lists.stanford.edu>
Reply-To: Jane Stanford <jstanford@gmail.com>


Note that the above change will not happen when the "From" address is a stanford.edu address.

How can I reach out to the Mailman service team?

If you need assistance with Mailman, submit a Help request.

Last modified April 25, 2024