[opendmarc-dev] [opendmarc-users] debugging dmarc=fail

[Andreas Schulze]

Am Do, 21.03.2013, 23:49 schrieb Chris Meidinger:
> I have been working on setting up opendmarc on a test machine today,
> and am running into an issue that I'm not finding a good way to debug. I'm hoping someone can help me.

Hi,

I also had minor problems to get my first "dmarc=pass" from a newly installed opendmarc.
The problem I solved had multiple faces:

1. The AuthservID
without any configuration opendkim+opendmarc use only the plain hostname, not the fqdn.
My spf-milter use the fqdn by default so they do not match.

2. I had AuthservIDWithJobID enabled in opendkim.conf
that also let opendmarc not understand dkim=pass as what it mean.

I solved these "challenges" with some testmails. Others users may be unable to do so.

I suggests a "LogWhy" addon like implemented in opendkim ( maybe default on )
opendmarc should log detailed, what AR header it sees and why it use/don't use an AR header.

That would make users life much easier.

Andreas