[opendmarc-users] debugging dmarc=fail

[Chris Meidinger]

I have been working on setting up opendmarc on a test machine today, and am running into an issue that I'm not finding a good way to debug. I'm hoping someone can help me.

I am using sendmail with opendkim and an SPF checker before opendmarc, both of those pass, but dmarc fails:

Authentication-Results: dmz205.smi-training.net/r2LMVHUn013122; dmarc=fail header.from=dmz205.smi-training.net
Authentication-Results: dmz205.smi-training.net; dkim=pass (1024-bit key) header.i=@dmz205.smi-training.net header.b=fUcrnROO; dkim-adsp=pass
Authentication-Results: dmz205.smi-training.net; spf=PASS (sender IP is 192.168.200.205) smtp.mailfrom=chris at dmz205.smi-training.net

I am not getting anything clearer in test mode either:

[root at dmz205 ~]# opendmarc -c /etc/mail/opendmarc.conf -t source.mime -vv
opendmarc: mlfi_connect() returned SMFIS_CONTINUE
opendmarc: source.mime: mlfi_envfrom() returned SMFIS_CONTINUE
opendmarc: source.mime: line 1: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 2: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 6: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 7: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 8: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 10: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 11: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 18: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 19: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 20: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 21: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 22: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 23: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 24: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 25: mlfi_header() returned SMFIS_CONTINUE
opendmarc: source.mime: line 26: mlfi_header() returned SMFIS_CONTINUE
### INSHEADER: idx=1 hname='Authentication-Results' hvalue='dmz205.smi-training.net/DEBUG-i; dmarc=fail header.from=dmz205.smi-training.net'

As far as I can tell DNS is working and the headers are correct, how can I see exactly what is causing dmarc=fail?

Thanks!!

Chris