On 14/09/2026 18:45, Adam Tazul wrote:
I was just wondering the same, an actual email that I sent to the ML a couple days ago only just came through now, with a few DMARC failure reports to my domain's webmaster email as well
A handful of people have their mail server send bogus DMARC reports, and you shouldn't worry too much about that. Specifically, a handful of servers running Stalwart software send DMARC failure reports despite the Authentication-Results indicating all policies evaluated successfully (including the final DMARC policy).
Here's an excerpt of a report I received (and that blew up my home-made DMARC report processing thingy.....); notice how all the policies evaluated to `pass`.
Auth-Failure: dmarc
Identity-Alignment: none
Authentication-Results: [redacted];
dkim=pass header.d=cynthia.dev (...);
spf=pass (...) smtp.helo=lists.archlinux.org;
spf=pass (...) smtp.mailfrom=aur-general-bounces@lists.(...);
iprev=pass policy.iprev=[redacted];
dmarc=pass header.from=cynthia.dev policy.dmarc=reject
User-Agent: Stalwart/1.0.0
Nothing to worry about ;)
Cheers
~Cynthia
PS: Thanks to the person who unclogged the mailing list pipes! #HugOps
OpenPGP_signature.asc
Description: OpenPGP digital signature
