Bug#962262: Acknowledgement (opendmarc fails many emails without apparent reason)

2020-06-05 Thread Benoît Panizzon
Dear Maintainer

I think I got it. Maybe updating the manpage would be very helpfull for
other people who stumble over the same problem.

DMARC needs to do an SPF check.

Well I have milter-greylist already performing SPF check, so I
configured what I tought would make opendmarc ignore the SPF check and
assuming an email that went that far already passed SPF check (which is
true in my case).

Now I understand, opendmarc need to do SPF check itself. Only this way
the result ever returns 'pass'.

SPFSelfValidate true

Problem solved.

I wonder if I could make milter-greylist to create a header which would
satisfy opendmarc but I could not find any documentation of the
Authentication-Result: header.

-Benoît-



Bug#962262: Acknowledgement (opendmarc fails many emails without apparent reason)

2020-06-05 Thread Benoît Panizzon
Additional Infos:

History file entry of such an failing email:

job 055AOEWZ026900
reporter magma.woody.ch
received 1591352655
ipaddr 2a00:1450:4864:20::52c
from gmail.com
mfrom gmail.com
spf -1
pdomain gmail.com
policy 18
rua mailto:mailauth-repo...@google.com
pct 100
adkim 114
aspf 114
p 110
sp 113
align_dkim 5
align_spf 5
action 2