Gmail can not verify mails from oracle.com anymore.

Volker Simonis volker.simonis at gmail.com
Wed Mar 9 11:08:55 UTC 2016 

Hi Fernando,

thanks for you detailed answer. Probably my initial mail should have been a
little more specific. So here are the full details:

- I'm reading and writing mails from my gmail account with the gmail web
client (no e-mail applications, no third-party accounts).

- The problems I describe (and which are new, at least for me) are with
mails I receive from OpenJDK mailing list to which I'm subscribed.

- If somebody from Oracle sends a mail directly to my gmail account,
everything seems fine. Following you can see the mail header of such a mail:

Delivered-To: volker.simonis at gmail.com
Received: by 10.112.201.105 with SMTP id jz9csp2496735lbc;
        Wed, 9 Mar 2016 01:39:35 -0800 (PST)
X-Received: by 10.66.233.194 with SMTP id
ty2mr47611274pac.126.1457516375212;
        Wed, 09 Mar 2016 01:39:35 -0800 (PST)
Return-Path: <Firstname.Lastname at oracle.com>
Received: from userp1040.oracle.com (userp1040.oracle.com. [156.151.31.81])
        by mx.google.com with ESMTPS id
rz3si11373065pac.2.2016.03.09.01.39.34
        for <volker.simonis at gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 09 Mar 2016 01:39:35 -0800 (PST)



*Received-SPF: pass (google.com <http://google.com>: domain of
Firstname.Lastname at oracle.com <Firstname.Lastname at oracle.com> designates
156.151.31.81 as permitted sender)
client-ip=156.151.31.81;Authentication-Results: mx.google.com
<http://mx.google.com>;       spf=pass (google.com <http://google.com>:
domain of Firstname.Lastname at oracle.com <Firstname.Lastname at oracle.com>
designates 156.151.31.81 as permitted sender)
smtp.mailfrom=Firstname.Lastname at oracle.com
<Firstname.Lastname at oracle.com>*Received:
from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74])
    by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with
ESMTP id u299dVNF020477
    (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK);
    Wed, 9 Mar 2016 09:39:31 GMT
Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235])
    by userv0022.oracle.com (8.14.4/8.13.8) with ESMTP id u299dU4c013059
    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL);
    Wed, 9 Mar 2016 09:39:31 GMT
Received: from abhmp0001.oracle.com (abhmp0001.oracle.com [141.146.116.7])
    by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id u299dUhm021174;
    Wed, 9 Mar 2016 09:39:30 GMT
Received: from dhcp-ukc1-twvpn-1-vpnpool-10-175-170-87.vpn.oracle.com (/
10.175.170.87)
    by default (Oracle Beehive Gateway v4.0)
    with ESMTP ; Wed, 09 Mar 2016 01:39:30 -0800
From: Firstname Lastname <Firstname.Lastname at oracle.com>

I thing the two important line here are:

Received-SPF: pass (google.com: domain of Firstname.Lastname at oracle.com
designates 156.151.31.81 as permitted sender) client-ip=156.151.31.81;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of Firstname.Lastname at oracle.com
designates 156.151.31.81 as permitted sender) smtp.mailfrom=
Firstname.Lastname at oracle.com


- If I receive a mail from the same person trough the mailing list only,
the header looks as follows (and I get the mentioned warning):

 Delivered-To: volker.simonis at gmail.com
Received: by 10.112.201.105 with SMTP id jz9csp1171678lbc;
        Wed, 2 Mar 2016 06:59:51 -0800 (PST)
X-Received: by 10.202.102.200 with SMTP id m69mr2723348oik.74.1456930791527;
        Wed, 02 Mar 2016 06:59:51 -0800 (PST)
Return-Path: <jigsaw-dev-bounces at openjdk.java.net>
Received: from ucsinet41.oracle.com (ucsinet41.oracle.com. [156.151.31.69])
        by mx.google.com with ESMTPS id
v4si4909551oer.61.2016.03.02.06.59.46
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 02 Mar 2016 06:59:51 -0800 (PST)


*Received-SPF: neutral (google.com <http://google.com>: 156.151.31.69 is
neither permitted nor denied by best guess record for domain of
jigsaw-dev-bounces at openjdk.java.net <jigsaw-dev-bounces at openjdk.java.net>)
client-ip=156.151.31.69;Authentication-Results: mx.google.com
<http://mx.google.com>;       spf=neutral (google.com <http://google.com>:
156.151.31.69 is neither permitted nor denied by best guess record for
domain of jigsaw-dev-bounces at openjdk.java.net
<jigsaw-dev-bounces at openjdk.java.net>)
smtp.mailfrom=jigsaw-dev-bounces at openjdk.java.net
<jigsaw-dev-bounces at openjdk.java.net>*
Received: from aojmv0009 (unknown [137.254.59.6]) by ucsinet41.oracle.com
with smtp
     id 46c1_1a8e_897bc1c1_404b_4bad_80e6_6181bbc3fd56;
    Wed, 02 Mar 2016 14:59:44 +0000
Received: from aojmv0009.oracle.com (localhost [127.0.0.1])
    by aojmv0009 (Postfix) with ESMTP id A399516FC09;
    Wed,  2 Mar 2016 14:59:39 +0000 (UTC)
X-Original-To: jigsaw-dev at openjdk.java.net
Delivered-To: jigsaw-dev at openjdk.java.net
Received: from ucsinet40.oracle.com (ucsinet40.oracle.com [156.151.31.68])
    by aojmv0009 (Postfix) with ESMTP id 9F7D016FBF5
    for <jigsaw-dev at openjdk.java.net>; Wed,  2 Mar 2016 14:59:38 +0000 (UTC)
Received: from userp1040.oracle.com (unknown [156.151.31.81]) by
    ucsinet40.oracle.com with smtp
    (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-GCM-SHA384)
    id 3c57_9292_5ef7d675_aa54_43c9_88d5_42790628157b;
    Wed, 02 Mar 2016 14:59:36 +0000
Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234])
    by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with
    ESMTP id u22Exa1Z015731
    (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK)
    for <jigsaw-dev at openjdk.java.net>; Wed, 2 Mar 2016 14:59:37 GMT
Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75])
    by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id u22ExaM8028136
    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)
    for <jigsaw-dev at openjdk.java.net>; Wed, 2 Mar 2016 14:59:36 GMT
Received: from abhmp0014.oracle.com (abhmp0014.oracle.com [141.146.116.20])
    by userv0122.oracle.com (8.14.4/8.14.4) with ESMTP id u22ExaRW017456
    for <jigsaw-dev at openjdk.java.net>; Wed, 2 Mar 2016 14:59:36 GMT
Received: from dhcp-ukc1-twvpn-2-vpnpool-10-175-198-188.vpn.oracle.com
    (/10.175.198.188) by default (Oracle Beehive Gateway v4.0)
    with ESMTP ; Wed, 02 Mar 2016 06:59:35 -0800
From: Firstname Lastname <Firstname.Lastname at oracle.com>

The authentication lines are different:

Received-SPF: neutral (google.com: 156.151.31.69 is neither permitted nor
denied by best guess record for domain of
jigsaw-dev-bounces at openjdk.java.net) client-ip=156.151.31.69;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 156.151.31.69 is neither permitted nor
denied by best guess record for domain of
jigsaw-dev-bounces at openjdk.java.net) smtp.mailfrom=
jigsaw-dev-bounces at openjdk.java.net

As the warnings only appear since today, I wonder if either Google is
checking more thoroughly or if the mai/server configuration at
openjdk.java.net was changed?

Regards,
Volker


On Wed, Mar 9, 2016 at 11:22 AM, Fernando Cassia <fcassia at gmail.com> wrote:

> On 3/9/16, Mario Torre <neugens at redhat.com> wrote:
> > On Wed, Mar 9, 2016 at 9:27 AM, Volker Simonis <volker.simonis at gmail.com
> >
> > wrote:
> >> Hi,
> >>
> >> I've subscribed to most Openjdk mailing lists from my Google mail
> >> account (gmail.com).
> >>
> >> Today I noticed that all mails in my inbox which were sent from the
> >> oracle.com domain are flagged with "Gmail couldn't verify that
> >> oracle.com actually sent this message (and not a spammer)"
>
> Volker,
>
> It is impossible to help you with more data: do you send emails from
> GMail using the web interface or do you have it configured to use an
> e-mail application (Outlook, Windows Mail, Thunderbird, etc) over pop3
> or imap protocols?
>
> GMail provides ways to configure third party accounts into your
> GMail,so you can send e-mail from OTHER (non-GMail) accounts (as
> sender) using your GMail web interface (and also smtp/imap). But for
> this to work every new sender account you add to your GMail must be
> validated (Google sends you a link that you need to click on).
>
> See here
>
> https://gmail.googleblog.com/2009/07/send-mail-from-another-address-without.html
>
> So, when you say "mail sent from Oracle" do you mean e-mail sent from
> third party @oracle.com accounts TO your inbox? or e-mails YOU sent
> from @oracle.com using your gmail account (as per the above referenced
> feature) ?
>
> In any case, I have no probems receiving e-mails from @oracle.com
> addresses on my GMail account (I usually get them from virtualbox devs
> as I admin the community mailing list).
>
> I also think perhaps this is not exactly the most accurate list to
> discuss this problem you're having. I mean, this relates to OpenJDK
> exactly how? Don't get me wrong. Good luck with solving your
> problem... but I don't know what else to suggest..
> FC
>

More information about the discuss mailing list