DMARC report mailing list subscriber address leaks

[Shelley]

Thanks.  Interesting that I don't show up under .FM, I have my MX & DNS 
handled there.

I'll mess around with this, thanks.

-s


----------
On July 24, 2015 7:49:43 PM Seth <list at sysfu.com> wrote:

> OK, as requested, here's the first report from fastmail.fm
>
> <?xml version="1.0"?>
>
> -<feedback>
>
>
> -<report_metadata>
>
> <report_id>7758186</report_id>
>
> <org_name>FastMail Pty Ltd</org_name>
>
> <email>dmarc at fastmail.com</email>
>
> <extra_contact_info>https://fastmail.com/</extra_contact_info>
>
>
> -<date_range>
>
> <begin>1437696000</begin>
>
> <end>1437782399</end>
>
> </date_range>
>
> </report_metadata>
>
>
> -<policy_published>
>
> <domain>sysfu.com</domain>
>
> <p>none</p>
>
> <sp>none</sp>
>
> <pct>100</pct>
>
> </policy_published>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.160.181</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>resistentialist.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.173</source_ip>
>
> <count>2</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>jeffhammett.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.160.175</source_ip>
>
> <count>2</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>resistentialist.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>212.227.17.20</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>segordon.net</envelope_to>
>
> <envelope_from>gmx.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmx.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.177</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>kvet.ch</envelope_to>
>
> <envelope_from>hellyeah.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>1e100.net</domain>
>
> <selector>20130820</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>hellyeah.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.181</source_ip>
>
> <count>2</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>fail</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>jeffhammett.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>195.140.195.194</source_ip>
>
> <count>3</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>fastmail.fm</envelope_to>
>
> <envelope_from>cpunks.org</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>cpunks.org</domain>
>
> <scope>mfrom</scope>
>
> <result>permerror</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>195.140.195.194</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>fail</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>fastmail.fm</envelope_to>
>
> <envelope_from>cpunks.org</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>cpunks.org</domain>
>
> <scope>mfrom</scope>
>
> <result>permerror</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.181</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>kvet.ch</envelope_to>
>
> <envelope_from>hellyeah.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>1e100.net</domain>
>
> <selector>20130820</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>hellyeah.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.169</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>jeffhammett.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.141.47.85</source_ip>
>
> <count>51</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>afflictions.org</envelope_to>
>
> <envelope_from>cpunks.org</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>cpunks.org</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>212.227.15.18</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>fail</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>segordon.net</envelope_to>
>
> <envelope_from>gmx.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmx.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.141.47.85</source_ip>
>
> <count>17</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>fail</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>afflictions.org</envelope_to>
>
> <envelope_from>cpunks.org</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>cpunks.org</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>212.227.15.18</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>segordon.net</envelope_to>
>
> <envelope_from>gmx.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmx.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>212.227.17.21</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>segordon.net</envelope_to>
>
> <envelope_from>gmx.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmx.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.212.178</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>pass</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>kvet.ch</envelope_to>
>
> <envelope_from>hellyeah.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>1e100.net</domain>
>
> <selector>20130820</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>pass</result>
>
> <human_result>pass</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>hellyeah.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
>
> -<record>
>
>
> -<row>
>
> <source_ip>209.85.160.176</source_ip>
>
> <count>1</count>
>
>
> -<policy_evaluated>
>
> <disposition>none</disposition>
>
> <dkim>fail</dkim>
>
> <spf>fail</spf>
>
> </policy_evaluated>
>
> </row>
>
>
> -<identifiers>
>
> <envelope_to>resistentialist.com</envelope_to>
>
> <envelope_from>gmail.com</envelope_from>
>
> <header_from>sysfu.com</header_from>
>
> </identifiers>
>
>
> -<auth_results>
>
>
> -<dkim>
>
> <domain>sysfu.com</domain>
>
> <selector>main</selector>
>
> <result>fail</result>
>
> <human_result>fail (message has been altered)</human_result>
>
> </dkim>
>
>
> -<spf>
>
> <domain>gmail.com</domain>
>
> <scope>mfrom</scope>
>
> <result>pass</result>
>
> </spf>
>
> </auth_results>
>
> </record>
>
> </feedback>