[opendmarc-dev] [dmarc-discuss] DMARC On AmazonSES

[Andreas Schulze]

Zitat von Roland Turner <roland.turner at trustsphere.com>:

> To use DMARC with email sent via SES, you'll need to set up DKIM  
> signing for the domain that appears in the RFC5322.From header.

Hello,

to me that sounds like opendmarc has currently a bug.

  -> http://www.dmarc.org/pipermail/dmarc-discuss/2013-July/002048.html
  -> http://www.dmarc.org/pipermail/dmarc-discuss/2013-July/002057.html

I get mails that pass spf and dkim.
dkim is alligned, spf not. That should be enougth to pass dmarc but  
opendmarc let the message fail.

can anybody confirm?

Return-Path: <test at e3.emarsys.net>
Authentication-Results: mta; dmarc=fail header.from=service3.zalando-lounge.de
Authentication-Results: mta; dkim=pass
         reason="1024-bit key; unprotected key"
         header.d=service3.zalando-lounge.de  
header.i=newsletter at service3.zalando-lounge.de
         header.b=IWGb3WPX; dkim-adsp=pass; dkim-atps=neutral
Authentication-Results: mta;
         spf=pass smtp.mailfrom=<test at e3.emarsys.net>  
smtp.helo=pmta43117.emarsys.net
From: Zalando-Lounge <newsletter at service3.zalando-lounge.de>

Andreas