Hello,

just back from MAAWG I try to pimp my opendmarc settings and configured opendmarc to send reports to myself
for messages that dmarc fail.

Now I see reports for amazon.de messages which (I guess) are valid.
I like to confirm that before open up a BugTicket for opendmarc.

---- headers ----
Authentication-Results: idvmailin13.datevnet.de;
dkim=pass (1024-bit key; unprotected) header.d=amazonses.com [email protected] header.b=pGFPWRZ7; dkim=pass (1024-bit key; unprotected) header.d=amazon.de [email protected] header.b=AOE4Rr31
Authentication-Results: idvmailin13.datevnet.de;
spf=pass smtp.mailfrom=<SRS0=lz3t=GZ=marketplace.amazon.de=comm-bounces+bbc-message-a2qh7is0p5p...@srs2.kundenserver.de> smtp.helo=mout.kundenserver.de
Received: from [212.227.15.41] ([212.227.15.41]) by mx.kundenserver.de
 (mxeue004) with ESMTPS (Nemesis) id 0LkWPY-1ZcQbJ2668-00aSaJ for
 <[email protected]>; Mon, 15 Jun 2015 13:45:25 +0200
Received: from a1-1.smtp-out.eu-west-1.amazonses.com ([54.240.1.1]) by
 mx.kundenserver.de (mxeue004) with ESMTPS (Nemesis) id
 0Lx0tZ-1Z6oIe2105-016iSE for <[email protected]>; Mon, 15 Jun 2015 13:45:25
 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
        s=uku4taia5b5tsbglxyj6zym32efj7xqv; d=amazonses.com; t=1434368723;
        
h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:Feedback-ID;
        bh=eeMsN+VjdPGpLrsIr6LyXM/mHyP5cY+C71dFzdBP1vs=;
        b=pGFPWRZ7oZp08p6lbcS+3IBcIUyIZV0PrcFQO3SQhPzntyb6shODM1PSXYEPP3vO
        1/lEWPunOx9KyNbiDM8nHRitVeVX2kPRt23p+dnHEJmZOXhMeHcmiktfZWmCpvZo9ca
        MSXe11pDFhNPD3PNgBzdnYCL8Di/J5PO56q1jr20=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
        s=ivrcnh6lde2bibpvjbrvhidms5kjngko; d=amazon.de; t=1434368723;
        [email protected];
        h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type;
        bh=eeMsN+VjdPGpLrsIr6LyXM/mHyP5cY+C71dFzdBP1vs=;
        b=AOE4Rr312VC2tBqK4hU872iB8jtmNc6wGHfNGJg7ZBCHwb4eZxLPAXSTr+9CuUMv
        PtPMJ7yzyKIzxmsjwdfOFQh3S0JDUPNdqBP9r+dKaxC2NK7XJSE0BzZ3HywbWnGsL+8
        AyuOr6J1PggBL13uG70i48fJDOHy7PMXArtxb9jE=
Date: Mon, 15 Jun 2015 11:45:23 +0000
From: "A&G-heute Preise inkl. MwSt. - Amazon Marketplace" <[email protected]>
Reply-To:
"A&G-heute Preise inkl. MwSt. - Amazon Marketplace" <[email protected]>
To: <[email protected]>
Message-ID: <0000014df709cb30-76de390b-aefc-4801-9ec7-c5fe64d7356b-000...@eu-west-1.amazonses.com>
Subject: =?UTF-8?Q?Versandbest=C3=A4tigung_f=C3=BCr_Ihre?=
 =?UTF-8?Q?_Bestellung_bei_REDACTED?=
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_Part_6875857_209686879.1434368723580"
X-AMAZON-CATEGORY: BBC-Message
X-AMAZON-RTE-VERSION: 2.0
X-AMAZON-METADATA: RI=A185P5GCBC076Y
Bounces-to: [email protected]
X-AMAZON-MAIL-RELAY-TYPE: notification
X-Original-MessageID: <urn.correios.msg.20150615114523115ee8fdcbb845578e430aa02d47b...@1434368723586.rte-svc-eu-1bbig-i-6bf9f72a.eu-west-1.amazon.com>
... more 1&1 specific headers ...
----

As far as I see, it's a message RFC5322.MailFrom = marketplace.amazon.de
The SPF-pass could be ignored because SPF is not aligned.
But DKIM pass for amazon.de. and DMARC-Settings "DKIM alignment: relaxed" + "Subdomain policy: unspecified"
make the messages pass DMARC in my eyes. But OpenDMARC have an other opinion.

Who is right?

Thanks
Andreas


_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to