> On Mar 27, 2017, at 9:20 AM, Edward Hibbert via dmarc-discuss > <[email protected]> wrote: > > I first posted this to spf-discuss, but folk there said that Microsoft do not > reject based on SPF issues, and that it was more suitable for this list. > Apologies if there is etiquette I breach. > > We send out quite large amounts of mail from groups.ilovefreegle.org. A > small proportion of them get bounced back by Hotmail. > > So far as I can tell from the NDR (source below, but with the recipient email > masked to xxxxx, and with the large content trimmed) what is happening is: > • We mail a hotmail user. > • The Hotmail user is set up to forward. I'm guessing that from > headers like this: > • Resent-From: <xxxxx> > X-MS-Exchange-Inbox-Rules-Loop: xxxxx > • The message is then sent from one of Microsoft's servers to another, > as per this header: > • Received: from EUR02-AM5-obe.outbound.protection.outlook.com > ([40.92.67.40]) by COL004-MC5F27.hotmail.com over TLS secured channel with > Microsoft SMTPSVC(7.5.7601.23143); > • That server then fails SPF and non-delivers because the SPF records > for my domain don't list Hotmail's server 40.92.67.40. Obviously. > However it's quite possible that I've mis-read this, or am doing something > else wrong. I've had a suggestion that I should add a sender-id record of > "spf2.0/pra ?all", but I'm not familiar with sender-id.
Don't do that. Sender-id is dead. > > I've had no luck getting the attention of anyone at Microsoft at a suitable > level. Any help welcome. You're DKIM signing a message with a selector/d= pair for which there's no public key published in DNS. That seems like a mistake, and means your mail isn't DKIM signed. If SPF fails due to forwarding (which it usually will, that's what SPF does) and your mail isn't DKIM signed, that'll trigger DMARC action. Cheers, Steve > > Edward > > > Delivered-To: [email protected] > Received: by 10.129.159.149 with SMTP id w143csp1029232ywg; Sun, 26 Mar 2017 > 17:27:05 -0700 (PDT) > X-Received: by 10.36.76.11 with SMTP id a11mr8136758itb.60.1490574425308; Sun, > 26 Mar 2017 17:27:05 -0700 (PDT) > Return-Path: > <dist-list-geeks+bncbd4pj45lrqhrbwfy4hdakgqejzxt...@ilovefreegle.org> > Received: from mail-it0-x245.google.com (mail-it0-x245.google.com. > [2607:f8b0:4001:c0b::245]) by mx.google.com with ESMTPS id > x15si9746323iti.99.2017.03.26.17.27.04 for <[email protected]> > (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 26 Mar > 2017 17:27:05 -0700 (PDT) > Received-SPF: pass (google.com: domain of > dist-list-geeks+bncbd4pj45lrqhrbwfy4hdakgqejzxt...@ilovefreegle.org > designates 2607:f8b0:4001:c0b::245 as permitted sender) > client-ip=2607:f8b0:4001:c0b::245; > Authentication-Results: mx.google.com; dkim=pass > [email protected]; spf=pass (google.com: > domain of dist-list-geeks+bncbd4pj45lrqhrbwfy4hdakgqejzxt...@ilovefreegle.org > designates 2607:f8b0:4001:c0b::245 as permitted sender) > smtp.mailfrom=dist-list-geeks+bncbd4pj45lrqhrbwfy4hdakgqejzxt...@ilovefreegle.org; > dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=hotmail.com > Received: by mail-it0-x245.google.com with SMTP id s128sf61668737itb.3 for > <[email protected]>; Sun, 26 Mar 2017 17:27:04 -0700 (PDT) > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; > d=ilovefreegle-org.20150623.gappssmtp.com; s=20150623; > h=delivered-to:date:from:subject:to:mime-version:message-id > :x-original-sender:x-original-authentication-results:precedence > :mailing-list:list-id:x-spam-checked-in-group:list-help; > bh=g2J/XD+kENF5P5ZYd+53Q0+Te96oqesXUtg0TA0TyaE=; > b=ymCafejQWBHSc8Xt3z0LPoyAFutG6mrLESxjCUo+Totjvzpzff/qMm0uGUrIxQjTcr > DD3uuC1TMMIdAu0zcfY9/FCuZM03RyMtb/Nagq2uwZe+Q4qCGbW8lTCW9/24xhqZSf6G > ZO8rm3YQHCnAvJnLIJkarZ8n7nWLd+47MBb/6OljO1W0xxHLerWE8AyEnJJ217jibNTA > 101OEjuVkUA5brC14nDc37mAZEg+KWmLvDB639kIdUNEncoByx3m8tRzT70qpVF049oZ > 8PcGTeMkVS/bgSEle17kCakVJoSOaP/Mr6gWC1QAni1d4ubmcyXp4ct43FQOZxQ42mqo Dwsw== > X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; > s=20161025; > h=x-gm-message-state:delivered-to:date:from:subject:to:mime-version > :message-id:x-original-sender:x-original-authentication-results > :precedence:mailing-list:list-id:x-spam-checked-in-group:list-help; > bh=g2J/XD+kENF5P5ZYd+53Q0+Te96oqesXUtg0TA0TyaE=; > b=aC3Bo7jy7pn6hVDaHGdWG9QT/7fDe2P1xcYPokIh35vtV6U96nCCVYsPplepzwuSRh > PPImjoPcm4LSm0qPuft4xv+g/ZOoZjsEBgbodnHspy5Fn6CfBnvIo+s9zkzG48GPD+2e > 8DTzUzZDI7gsxDLq38kqhPEGNZWvEta4+rmrnc2lFdvN6ar9QcqCke3wSvvzl2JeEo4N > CPUKRHRX/ZcCaaMNNQjebFrfiaMunOlFhkAZUm4CzRy72BfPBlaRrw9oPwog/qtzWUZ4 > GTRvVuyci5kfeQ4a3LWoo4wgCwlE7OqTtc4Q1RqzoWmWBA8/XwsBF7c+pDUf3dohKhrK +5gg== > X-Gm-Message-State: > AFeK/H0dwF20eaIGhAc3pBp/I1G5+wOAONgVVs8bvrqIiq6+7YV3gwiwWVs8AltitU9q0g== > X-Received: by 10.107.164.151 with SMTP id d23mr6687650ioj.39.1490574424751; > Sun, 26 Mar 2017 17:27:04 -0700 (PDT) > X-BeenThere: [email protected] > Received: by 10.157.7.195 with SMTP id 61ls11994660oto.31.gmail; Sun, 26 Mar > 2017 17:27:04 -0700 (PDT) > X-Received: by 10.55.98.74 with SMTP id w71mr3229836qkb.118.1490574424558; > Sun, 26 Mar 2017 17:27:04 -0700 (PDT) > Received: from mail-qk0-f180.google.com (mail-qk0-f180.google.com. > [209.85.220.180]) by mx.google.com with ESMTPS id > z59si8357839qtc.147.2017.03.26.17.27.04 for > <[email protected]> (version=TLS1_2 > cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 26 Mar 2017 17:27:04 > -0700 (PDT) > Received-SPF: pass (google.com: domain of > [email protected] designates > 209.85.220.180 as permitted sender) client-ip=209.85.220.180; > Received: by mail-qk0-f180.google.com with SMTP id p22so26448040qka.3 for > <[email protected]>; Sun, 26 Mar 2017 17:27:04 -0700 (PDT) > X-Received: by 10.55.143.67 with SMTP id r64mr16645494qkd.274.1490574424284; > Sun, 26 Mar 2017 17:27:04 -0700 (PDT) > X-Forwarded-To: [email protected] > X-Forwarded-For: [email protected] [email protected] > Delivered-To: [email protected] > Received: by 10.12.162.132 with SMTP id g4csp958961qva; Sun, 26 Mar 2017 > 17:27:03 -0700 (PDT) > X-Received: by 10.157.58.54 with SMTP id j51mr10721523otc.48.1490574423578; > Sun, 26 Mar 2017 17:27:03 -0700 (PDT) > Received: from BAY004-OMC1S8.hotmail.com (bay004-omc1s8.hotmail.com. > [65.54.190.19]) by mx.google.com with ESMTPS id > d46si5119592otd.277.2017.03.26.17.27.03 for <[email protected]> > (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 26 Mar 2017 > 17:27:03 -0700 (PDT) > Received-SPF: pass (google.com: domain of [email protected] designates > 65.54.190.19 as permitted sender) client-ip=65.54.190.19; > Received: from bay0-xmr-081.phx.gbl ([65.54.190.60]) by > BAY004-OMC1S8.hotmail.com with Microsoft SMTPSVC(7.5.7601.23008); Sun, 26 Mar > 2017 17:27:02 -0700 > Received: from mail pickup service by bay0-xmr-081.phx.gbl with Microsoft > SMTPSVC; Sun, 26 Mar 2017 17:27:01 -0700 > Date: Sun, 26 Mar 2017 17:27:01 -0700 > From: [email protected] > Subject: [Eastbourne Freegle] What's New (22 messages) - Mobile Phone, metal > detector, single duvet, tiles, Plastic straws... > To: [email protected] > MIME-Version: 1.0 > Content-Type: multipart/report; report-type=feedback-report; > boundary="B5BA3D3E-6C6A-42C6-A416-C5FAE338BD42" > Message-ID: <[email protected]> > X-OriginalArrivalTime: 27 Mar 2017 00:27:01.0929 (UTC) > FILETIME=[DA8C3990:01D2A690] > X-Removed-Original-Auth: Dkim didn't pass. > X-Original-Sender: [email protected] > X-Original-Authentication-Results: mx.google.com; spf=pass (google.com: > domain of [email protected] > designates 209.85.220.180 as permitted sender) > smtp.mailfrom=geeks+caf_=dist-list-geeks=ilovefreegle....@ilovefreegle.org; > dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=hotmail.com > Precedence: list > Mailing-list: list [email protected]; contact > [email protected] > List-ID: <dist-list-geeks.ilovefreegle.org> > X-Spam-Checked-In-Group: [email protected] > X-Google-Group-Id: 1083502690077 > List-Help: > <https://support.google.com/a/ilovefreegle.org/bin/topic.py&topic=25838>, > <mailto:[email protected]> > > --B5BA3D3E-6C6A-42C6-A416-C5FAE338BD42 > Content-Type: text/plain; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > This is an email abuse report for an email message received from IP > 40.92.67.40 on Sun, 26 Mar 2017 17:27:00 -0700. > The message below did not meet the sending domain's authentication policy. > For more information about this format please see > http://www.ietf.org/rfc/rfc5965.txt. > > --B5BA3D3E-6C6A-42C6-A416-C5FAE338BD42 > Content-Type: message/feedback-report > > Feedback-Type: auth-failure > User-Agent: XMR/2.2 > Version: 1.0 > Original-Mail-From: <[email protected]> > Arrival-Date: Sun, 26 Mar 2017 17:27:00 -0700 > Message-ID: <[email protected]> > Authentication-Results: hotmail.com; spf=fail (sender IP is 40.92.67.40; > identity alignment result is pass and alignment mode is relaxed) > [email protected]; dkim=permerror > (identity alignment result is pass and alignment mode is relaxed) > header.d=groups.ilovefreegle.org; x-hmca=fail > [email protected] > Source-IP: 40.92.67.40 > Auth-Failure: spf > Reported-Domain: groups.ilovefreegle.org > DKIM-Domain: groups.ilovefreegle.org > DKIM-Identity: @groups.ilovefreegle.org > DKIM-Selector: x > > > --B5BA3D3E-6C6A-42C6-A416-C5FAE338BD42 > Content-Type: message/rfc822 > Content-Disposition: inline > > Authentication-Results: hotmail.com; spf=fail (sender IP is 40.92.67.40; > identity alignment result is pass and alignment mode is relaxed) > [email protected]; dkim=permerror > (identity alignment result is pass and alignment mode is relaxed) > header.d=groups.ilovefreegle.org; x-hmca=fail > [email protected] > X-Envelope-Sender: [email protected] > X-SID-PRA: [email protected] > X-AUTH-Result: FAIL > X-SID-Result: FAIL > Received: from EUR02-AM5-obe.outbound.protection.outlook.com ([40.92.67.40]) > by COL004-MC5F27.hotmail.com over TLS secured channel with Microsoft > SMTPSVC(7.5.7601.23143); > Sun, 26 Mar 2017 17:27:00 -0700 > Received: from HE1EUR02FT026.eop-EUR02.prod.protection.outlook.com > (10.152.10.55) by HE1EUR02HT138.eop-EUR02.prod.protection.outlook.com > (10.152.11.187) with Microsoft SMTP Server (version=TLS1_2, > cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.977.7; Mon, 27 Mar > 2017 00:26:58 +0000 > Received: from DB3PR04MB0635.eurprd04.prod.outlook.com (10.152.10.53) by > HE1EUR02FT026.mail.protection.outlook.com (10.152.10.130) with Microsoft SMTP > Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id > 15.1.977.7 via Frontend Transport; Mon, 27 Mar 2017 00:26:58 +0000 > Received: from DB3PR04MB0635.eurprd04.prod.outlook.com ([::1]) by > DB3PR04MB0635.eurprd04.prod.outlook.com ([fe80::d14c:42b1:de82:84e0%14]) with > Microsoft SMTP Server id 15.01.0991.020; Mon, 27 Mar 2017 00:26:58 +0000 > From: Eastbourne Freegle <[email protected]> > To: "REDACTED" <[email protected]> > Subject: [Eastbourne Freegle] What's New (22 messages) - Mobile Phone, metal > detector, single duvet, tiles, Plastic straws... > Thread-Topic: [Eastbourne Freegle] What's New (22 messages) - Mobile Phone, > metal detector, single duvet, tiles, Plastic straws... > Thread-Index: AQHSppDYm1pV6pQ93Uq46X2he1PFEQ== > Date: Mon, 27 Mar 2017 00:26:53 +0000 > Message-ID: <[email protected]> > List-Unsubscribe: <mailto:[email protected]>, > <https://www.ilovefreegle.org/unsubscribe?u=3366627&k=tmD6Wb9C4YkSa0ek1nlT9XsWKSDUSakl&src=digest> > Reply-To: Eastbourne Freegle <[email protected]> > X-MS-Has-Attach: > X-MS-Exchange-Inbox-Rules-Loop: xxxxx > X-MS-TNEF-Correlator: > authentication-results: spf=pass (sender IP is 5.28.62.25) > smtp.mailfrom=users.ilovefreegle.org; hotmail.com; dkim=fail (no key for > signature) header.d=groups.ilovefreegle.org;hotmail.com; dmarc=pass > action=none header.from=groups.ilovefreegle.org; > received-spf: Pass (protection.outlook.com: domain of users.ilovefreegle.org > designates 5.28.62.25 as permitted sender) receiver=protection.outlook.com; > client-ip=5.28.62.25; helo= bulk2.ilovefreegle.org; > x-incomingtopheadermarker: > OriginalChecksum:DF5692C7C50BFDE98C577AFD7E200590299FBACADA6DFFE3BEF68BEAEC674604;UpperCasedChecksum:16A9CCA476FB28960458C8F023F93FC727165B54CFF6A97FD94315B23BB6B9D9;SizeAsReceived:1591;Count:14 > dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; > d=groups.ilovefreegle.org; s=x; t=1490574413; > bh=rhxD9kWvXlU1BIAKNM5poNTQqi3BCxlNJq+F0bxUg9E=; > h=Date:Subject:From:Reply-To:To:List-Unsubscribe; > b=foUd5p9amI3QtBbD57lIUFDf/PbQLbFQEZL/tEW6Az53HAKo3osXUpdOp+rOYNYnl > rBz6/MqkpEgoGnTeOgTtLlc4f2h0fbC+7bXeoQ18vlMjrqY0WAuurP023f05fYH > x-originalarrivaltime: 27 Mar 2017 00:26:53.0996 (UTC) > FILETIME=[D5D1BEC0:01D2A690] > x-incomingheadercount: 60 > x-eopattributedmessage: 1 > x-eoptenantattributedmessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 > cmm-sender-ip: 5.28.62.25 > cmm-sending-ip: 5.28.62.25 > cmm-authentication-results: hotmail.com; spf=pass (sender IP is 5.28.62.25; > identity alignment result is pass and alignment mode is relaxed) > [email protected]; > dkim=permerror (identity alignment result is pass and alignment mode is > relaxed) header.d=groups.ilovefreegle.org; x-hmca=pass > [email protected] > cmm-x-sid-pra: [email protected] > cmm-x-auth-result: PASS > cmm-x-sid-result: PASS > cmm-x-message-status: n:n > cmm-x-message-delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w > cmm-x-message-info: > NhFq/7gR1vTtxTpqFsmPy1x2DQxRt9YnABbzirtgo6aUOIU2TPR4WVZ6daA6mQmOiWM3hEUKDbw1u9t0KSVfcGpkvTPaBFHyO9ThLNG+LGDV1JYtB7vrBp55E0q2k2qN24FYCOJQwD4d3kqrCakcgmRgf2PmI0uJY3ScgH1yXN/z2XD2APGmxh1KbnSGxBEnx8mkEl0YQRh3CrYAI4/pcw1l7rYoVegvpCPHn/AfG0J3xL64wp4EQvOGs+kZhb9p > x-microsoft-exchange-diagnostics: > 1;HE1EUR02HT138;7:zIjbbIHoeqV7UqXF+RVp5+1ZJp46TmcwN0H0QVWcdqwmYctwIOCBf7UgglQo303TePZQSPFRhanaSiTWiTYAKeVozXOOHxEqsk5ERcCSXY03hMNRZ5Rj8NhMR8S9ktVRibl5QJocL8iJOzFCAVK9JsS0YwqtSkM48UtikHnUzsperdpGLxYiv3J0ubYxkxRFRJiowAUFhA5sgLMUaOhicxsTCAKLBi7jmLbhVqttO4yY/Hi6TYEt040l9TZ0CvgIrFQ7uwXErJUPoCcglot4B1Nu8S5zwCBAYPXPMCVlJwefvp1DHr5ro2pXu+RH1nSo > x-forefront-antispam-report: > EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:HE1EUR02HT138;H:DB3PR04MB0635.eurprd04.prod.outlook.com;FPR:;SPF:None;LANG:en; > x-ms-office365-filtering-correlation-id: da52d7d9-6db0-4982-f1c2-08d474a7fb26 > x-microsoft-antispam: > UriScan:;BCL:0;PCL:0;RULEID:(22001)(421252002)(2017031320274)(201702221075);SRVR:HE1EUR02HT138; > x-exchange-antispam-report-cfa-test: > BCL:2;PCL:0;RULEID:(444111366)(82015058);SRVR:VE1EUR03HT026;BCL:2;PCL:0;RULEID:;SRVR:VE1EUR03HT026;BCL:0;PCL:0;RULEID:(444000031);SRVR:HE1EUR02HT138;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT138; > spamdiagnosticoutput: 1:99 > spamdiagnosticmetadata: NSPM > x-ms-exchange-crosstenant-originalarrivaltime: 27 Mar 2017 00:26:55.3148 (UTC) > x-ms-exchange-crosstenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa > x-ms-exchange-crosstenant-fromentityheader: Internet > x-ms-exchange-transport-crosstenantheadersstamped: VE1EUR03HT026 > x-ms-exchange-transport-endtoendlatency: 00:00:02.5151561 > Resent-From: <xxxxx> > x-microsoft-exchange-diagnostics-untrusted: > 1;VE1EUR03HT026;7:K4kDmvoze/0zbUIm44FGOc9B7/J/VBuX2yQtfCPbf8BKY8Re0r0dEuy/8XdsDoSpzzH2GP3QuhApokDq8IfJAVKCKcoClJ1U2PVwHVTFGMmOau0DV/Wj4ugfQeW0YWwtU/fDMbFEG64fx+Jrgg385umOGedV3vk7FCagYGHXe61YQ+KkJWSCGPAzPlrBSlh+VBt+DV8wUyFhBl3yOOxBSWTETN9ksz1dn4iUqVCvJObHQN3MRPC2800tJ+kW3FZ8vNaL0br/xkRkeLv/oLmUBHCBL9MHME3xxCrgHQD4GDzMMINfaowypv5y7Vu+Ivk+yh2a9oGm2JxtZmAnJSPjyQ== > x-forefront-antispam-report-untrusted: > EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:VE1EUR03HT026;H:COL004-MC4F29.hotmail.com;FPR:;SPF:None;LANG:en; > x-microsoft-antispam-untrusted: > BCL:2;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:VE1EUR03HT026; > x-ms-exchange-transport-crosstenantheadersstripped: > HE1EUR02FT026.eop-EUR02.prod.protection.outlook.com > x-forefront-prvs: 02596AB7DA > Content-Type: multipart/alternative; > boundary="_000_69c98f5352c5af2e73169bc8bea6a525usersilovefreegleorg_" > MIME-Version: 1.0 > X-OriginatorOrg: outlook.com > X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Mar 2017 00:26:58.3455 > (UTC) > X-MS-Exchange-CrossTenant-fromentityheader: Internet > X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa > X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT138 > Return-Path: [email protected] > > --_000_69c98f5352c5af2e73169bc8bea6a525usersilovefreegleorg_ > Content-Type: text/plain; charset="utf-8" > Content-Transfer-Encoding: base64 > > <trimmed> > > --_000_69c98f5352c5af2e73169bc8bea6a525usersilovefreegleorg_ > Content-Type: text/html; charset="utf-8" > Content-ID: <[email protected]> > Content-Transfer-Encoding: base64 > > <trimmed> > > --_000_69c98f5352c5af2e73169bc8bea6a525usersilovefreegleorg_-- > > --B5BA3D3E-6C6A-42C6-A416-C5FAE338BD42-- > > _______________________________________________ > dmarc-discuss mailing list > [email protected] > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well terms > (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
