SPF can pass without being a relevant pass for DMARC; DMARC requires it not
only to pass but also to align with From:. As Alessandro pointed out, your
DMARC record specifically prevents a lists.openlib.org SPF pass from being an
openlib.org DMARC SPF pass.
And yes, it's entirely possible for a message to have 2 or more DKIM
signatures, including signatures for the same domain with different results. As
long as there exists a DKIM signature that is aligned and passes, the DMARC
DKIM result is pass. (As I recall, the spec is unclear about what you do if
there are multiple DKIM results. That should probably be fixed and it would be
nice if we allowed the selector to be reported as well.)
Elizabeth
On Tuesday, July 5, 2016 12:54 AM, Thomas Krichel via dmarc-discuss
<[email protected]> wrote:
Hi gang,
I am new to DMARC. Google have sent me a report that I attach.
I am puzzled by what I am reading. About DKIM
<dkim>
<domain>openlib.org</domain>
<result>pass</result>
</dkim>
<dkim>
<domain>openlib.org</domain>
<result>fail</result>
</dkim>
How can it fail and pass at the same time?
Then about SPF
<record>
<row>
<source_ip>2a01:4f8:190:62e8::68</source_ip>
<count>7</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>openlib.org</header_from>
</identifiers>
<auth_results>
...
<spf>
<domain>lists.openlib.org</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
How can it say that the SPF fails in the policy evaluated,
but later say it passes. Could this be me posting to a mailing
list, with the from: saying [email protected], but forwarded
by lists.openlib.org? 2a01:4f8:190:62e8::68 is SPF authorized to
send mail for both lists.openlib.org and openlib.org, so this
would still be puzzling.
--
Cheers,
Thomas Krichel http://openlib.org/home/krichel
skype:thomaskrichel
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
