On 4/13/14, 6:17 PM, Mark Sapiro wrote: > On 04/13/2014 03:03 PM, Jim Popovitch wrote: >> DMARC checks alignment of *both* DKIM and SPF, if either is broken DMARC >> fails. >> >>> SPF does not check the "From:" header line, and that's where the >>> troubles begin with DMARC. >> SPF checks sending IPs (of which your IPs won't match Yahoo's, thus >> breaking DMARC) >> >> Either an SPF failure or a DKIM failure will cause a DMARC rejection >> if p=reject. > > I'm not sure that's correct. I've been testing this so many ways, I'm > not sure what I'm seeing, but I think a reject requires BOTH DKIM and > SPF to be absent or fail. If either passes, no DMARC reject occurs. > > There are weird issues though. It seems I can't post from my gmail > address to my yahoo group. I get a non-delivery notice from gmail. I'm > not sure why. The yahoo group exists and my gmail address is a member > with posting privileges. > > I'll follow up more after dinner break. > When they first added the DKIM, adding SPF to my domain fixed the warnings that people got in GMail. When Yahoo upped to reject, this doesn't seem to help. I don't know if there is supposed to be a difference here, or if Yahoo changed something else in the DMARC record they changed to that would cause the SPF match on Envelope to no longer override the DKIM error.
-- Richard Damon ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
