Am 21.11.23 um 12:44 schrieb Ralf Hildebrandt via mailop:
SPF, DKIM, DMARC, douoble-opt-in, valid forward and reverse DNS
records are all in place
well, the messages send via *this* list arrive here without a DKIM signature 
for d=mailop.org
Ralf's initial message included a DKIM signature header from d=charite.de
charite.de -> mailop.org -> mailman -> some message modification + 5322.From 
changed to @mailop.org

My MTA as well as Gmail receive a message
- passing SPF for 5321.MailFrom and 5322.From
- DKIM for d=charite.de fail
- DKIM for d=mailop.org is not present
- DMARC Policy for mailop.org i p=quarantine

So, my MTA as well as Gmail receive messages only authenticated by SPF for a 
domain that announce DMARC p=quarantine.


But, messages via [email protected], Ralf's initial question, are 
different:

here I see messages from
- Src: 188.68.34.52
with
- 5321.MailFrom @postfix.org
- 5322.From @postfix.org
- an valid DKIM signature d=postfix.org

So
 - SPF pass
 - DKIM pass
 - but no DMARC-Policy for postfix.org (see 
https://dns.google/query?name=_dmarc.postfix.org&rr_type=TXT)

At least "DKIM and DMARC is in place" seem to be not really true (if I missed 
nothing...)

Andreas
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to