Well, there is a mismatch of the SPF records, the root for the domain says 
-all, but the included one that actually has the relevant /26 says ~all, but 
aside from that, I’d suggest that you open a ticket with Hotmail Support and 
ask what the issue is.

Aloha,
Michael.
--
Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been 
Processed." | Open a HotMail 
Ticket<http://go.microsoft.com/fwlink/?LinkID=614866&clcid>?

From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Justin Frechette
Sent: Thursday, October 13, 2016 8:42 AM
To: mailop@mailop.org
Subject: [mailop] hotmail.com bouncing DMARC p=none emails

I feel as if I'm overlooking something and hoping someone could provide some 
clarity.

Receiving these NDRs for a client:

smtp;550 5.7.0 (SNT004-MC4F47) Unfortunately, messages from (207.254.213.206) 
on behalf of 
(kuspit.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fkuspit.com&data=01%7C01%7Cmichael.wise%40microsoft.com%7Cb854b2e0091d45b8ce0f08d3f380ed0a%7C72f988bf86f141af91ab2d7cd011db47%7C1&sdata=bbjiIrxwcBr7XsCSiXMbvHI5lekjKaEY6%2F2lLAkXp5s%3D&reserved=0>)
 could not be delivered due to domain owner policy restrictions.

This appears to be the diag for a bounce message with a DMARC record of 
p=reject (thanks to 
WttW<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwordtothewise.com%2F2014%2F04%2Fexample-bounces-due-yahoo-preject%2F&data=01%7C01%7Cmichael.wise%40microsoft.com%7Cb854b2e0091d45b8ce0f08d3f380ed0a%7C72f988bf86f141af91ab2d7cd011db47%7C1&sdata=CFK4dW%2BEVoHKgj34tw2HLi9XFoH8rV6wBQhNppPguVA%3D&reserved=0>);
 however, the 5322.from address domain, 
kuspit.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fkuspit.com&data=01%7C01%7Cmichael.wise%40microsoft.com%7Cb854b2e0091d45b8ce0f08d3f380ed0a%7C72f988bf86f141af91ab2d7cd011db47%7C1&sdata=bbjiIrxwcBr7XsCSiXMbvHI5lekjKaEY6%2F2lLAkXp5s%3D&reserved=0>,
 has the following DMARC:

v=DMARC1; p=none; 
rua=mailto:ro8ow...@ag.dmarcian.com<mailto:ro8ow...@ag.dmarcian.com>, 
mailto:infraestruct...@kuspit.com<mailto:infraestruct...@kuspit.com>; 
ruf=mailto:infraestruct...@kuspit.com<mailto:infraestruct...@kuspit.com>; fo=1

We have not setup them up to DKIM sign using their domain yet (currently they 
are DKIM signing using a shared domain that does not match the 5322.from 
domain); however, with a p=none statement, I would assume that the messages 
would not bounce.

Am I missing something obvious?

Thanks in advanced.

Justin Frechette


_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to