Franck, What if the RFC7208.MAILFROM is empty? I recall some questions from colleagues re dmarc reporting and the spf scope (help or mailfrom).
Thanks, Dave -- Dave Lugo Engineer, Comcast Anti-Abuse Technologies Desk: 215-286-5451 From: dmarc-discuss <[email protected]<mailto:[email protected]>> on behalf of Franck Martin via dmarc-discuss <[email protected]<mailto:[email protected]>> Reply-To: Franck Martin <[email protected]<mailto:[email protected]>> Date: Monday, April 4, 2016 at 11:51 AM To: Maarten Oelering <[email protected]<mailto:[email protected]>> Cc: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>, DMARC Discussion List <[email protected]<mailto:[email protected]>> Subject: Re: [dmarc-discuss] Multiple SPF results in report It is a bug. There can only be one SPF per record. Theoretically SPF returns 2 results, one for the RFC7208.HELO and another one for RFC7208.MAILFROM, but DMARC takes as input only RFC7208.MAILFROM, therefore only this results is needed in DMARC reports. RFC7208.MAILFROM is not RFC5321.MailFrom, there is a subtle but important difference here. On Mon, Apr 4, 2016 at 12:23 AM, Maarten Oelering via dmarc-discuss <[email protected]<mailto:[email protected]>> wrote: Do you mean that in the XML you see 6 <spf> elements in one <auth_results> element? Or do you mean you see 6 different <spf> domains in the your reports? Maarten Oelering Postmastery On 4 apr. 2016, at 09:05, Nick via dmarc-discuss <[email protected]<mailto:[email protected]>> wrote: I received a DMARC report with multiple SPF results. I wonder how this is possible as I only have one SPF record for my domain defined. In one report I got 6 SPF results. The only thing I could think of is some automatic forwarding service changing the return path header. Are there more usecases possible how this can happen? Thanks Nick _______________________________________________ dmarc-discuss mailing list [email protected]<mailto:[email protected]> http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected]<mailto:[email protected]> http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
