On 2014-09-30 14:29, A. Schulze via dmarc-discuss wrote:
Arnaud de Prelle via dmarc-discuss:
Received-SPF: Pass (icecube.pnzone.net: domain of
bounces.amazon.com designates 54.240.0.150 as permitted sender)
client-ip=54.240.0.150;
envelope-from="[email protected]";
helo=a0-150.smtp-out.eu-west-1.amazonses.com;
receiver=icecube.pnzone.net; mechanism="include:amazon.com";
identity=mailfrom
DMARC-Filter: OpenDMARC Filter v1.3.0 icecube.pnzone.net
s8TNlnH1021919
Authentication-Results: icecube.pnzone.net; dmarc=fail
header.from=amazon.fr
Authentication-Results: icecube.pnzone.net; dkim=pass
reason="1024-bit key; unprotected key"
header.d=amazonses.com [email protected] header.b=BOrJMGL0;
dkim-adsp=pass; dkim-atps=neutral
looks like you miss "AddAllSignatureResults yes" in opendkim.conf
Without you have only an AR header for amazonses.com but not for .fr
The SPF Result is invisible for opendmarc which result in dmarc=fail
search for a recent discussion about that on opendmarc-users ML
Andreas
Thank you John & Andreas.
I'll amend my config files with this parameter which I indeed forgot.
Best Regards,
Arnaud.
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
