messages from redhat.com fail DMARC and are marked as spam

[Przemek Klosowski]

I am not sure how recent this is but I just noticed that a lot of 
messages to this list from folks at redhat.com end up quarantined. The 
reason seems to be:

Authentication-Results https://tools.ietf.org/html/rfc8601 ERROR 
Sender failed DMARC validation 	spf=pass (sender IP is 38.145.32.11) 
smtp.mailfrom=lists.fedoraproject.org; dkim=none (message not signed) 
header.d=none;dmarc=fail action=quarantine 
header.from=redhat.com;compauth=fail reason=000

bastion.fedoraproject.org (38.145.32.11)  is the last hop on the way to 
office365.com which I am forced to use.

[Kevin Fenzi]

On Thu, Jun 25, 2026 at 03:05:24PM -0400, Przemek Klosowski via devel wrote:
> I am not sure how recent this is but I just noticed that a lot of messages
> to this list from folks at redhat.com end up quarantined. The reason seems
> to be:
>
> Authentication-Results https://tools.ietf.org/html/rfc8601 ERROR Sender
> failed DMARC validation 	spf=pass (sender IP is 38.145.32.11)
> smtp.mailfrom=lists.fedoraproject.org; dkim=none (message not signed)
> header.d=none;dmarc=fail action=quarantine
> header.from=redhat.com;compauth=fail reason=000
>
> bastion.fedoraproject.org (38.145.32.11)  is the last hop on the way to
> office365.com which I am forced to use.

https://forge.fedoraproject.org/infra/tickets/issues/12487

kevin

[Chris Adams]

Once upon a time, Przemek Klosowski via devel  said:
> I am not sure how recent this is but I just noticed that a lot of
> messages to this list from folks at redhat.com end up quarantined.

Aside from DMARC, it appears that @redhat.com outbound messages come
from an AWS IP that's listed in Spamhaus:

Received: from mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com
         (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by
         relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3,
         cipher=TLS_AES_256_GCM_SHA384) id us-mta-631-aPSluwObPhGfMI0aAcFHew-1;
         Thu,
         25 Jun 2026 10:13:29 -0400

$ dig +short 63.198.186.54.zen.spamhaus.org a
127.0.0.3

https://www.spamhaus.org/css/

Maybe somebody at Red Hat can pass that along to corporate IT?