Attaching the Aggregate Report received today from Google. The SPF
'auth_results' are marked as 'fail' for all the IPs however it should pass.
Yahoo and Hotmail reports it fine.
For auth_results, RFC says "This element contains DKIM and SPF results,
uninterpreted with respect to DMARC."
Can someone help identify the issue? Attaching the aggregated report from
google and hotmail.
Thanks,
Anshul
On Tue, Jul 23, 2013 at 10:17 PM, Anshul Agrawal <[email protected]>wrote:
> Hi,
> I have turned on the DMARC in monitor mode and started receiving the
> reports from Yahoo, Google, and Hotmail. The third party ESP we use has
> proper SPF records in place and uses our DKIM ket to sign the mail.
>
> Google seems to report, for the same IP and 'Return-Path' domain, SPF fail
> and pass in the same report. Moreover, one day, all the IPs were reported
> to fail the SPF check.
>
> Note that in the below messages, SPF checks fail for far more number of
> times than it is regarded as pass. However, all the test mails that I have
> sent to Gmail, all of them show SPF pass so far when I check headers and
> have never failed.
>
> <record>
> <row>
> <source_ip>50.31.156.116</source_ip>
> <count>15</count>
> ...
> ...
> <spf>
> <domain>pm.mtasv.net</domain>
> <result>fail</result>
> </spf>
> </auth_results>
> </record>
>
> And
>
> <record>
> <row>
> <source_ip>50.31.156.116</source_ip>
> <count>2</count>
> ...
> ...
> <spf>
> <domain>pm.mtasv.net</domain>
> <result>pass</result>
> </spf>
> </auth_results>
> </record>
>
> IMHO given the same IP and domain, SPF check should not fail for some pass
> for other requests (given the DNS records are not updated)
>
> Am I missing something?
>
> Thanks,
> Anshul
>
<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>google.com</org_name>
<email>[email protected]</email>
<extra_contact_info>http://support.google.com/a/bin/answer.py?answer=2466580</extra_contact_info>
<report_id>5202261422610070550</report_id>
<date_range>
<begin>1374537600</begin>
<end>1374623999</end>
</date_range>
</report_metadata>
<policy_published>
<domain>jagritiregistration.com</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>none</p>
<sp>none</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>50.31.156.116</source_ip>
<count>16</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.118</source_ip>
<count>10</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.121</source_ip>
<count>3</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.120</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.122</source_ip>
<count>3</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.117</source_ip>
<count>7</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>202.3.77.189</source_ip>
<count>3</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
<reason>
<type>forwarded</type>
<comment></comment>
</reason>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
<spf>
<domain>pm.mtasv.net</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
</feedback>
<?xml version="1.0" encoding="utf-8"?>
<feedback>
<report_metadata>
<org_name>Microsoft Corp.</org_name>
<email>[email protected]</email>
<report_id>[email protected]</report_id>
<date_range>
<begin>1374577200</begin>
<end>1374663600</end>
</date_range>
</report_metadata>
<policy_published>
<domain>jagritiregistration.com</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>none</p>
<sp>none</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>50.31.156.116</source_ip>
<count>6</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.117</source_ip>
<count>5</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.118</source_ip>
<count>6</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.120</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>temperror</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.120</source_ip>
<count>7</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.121</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
<record>
<row>
<source_ip>50.31.156.122</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>jagritiregistration.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>pm.mtasv.net</domain>
<result>pass</result>
</spf>
<dkim>
<domain>jagritiregistration.com</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
</feedback>
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
