[opendmarc-users] debugging dmarc=fail

[Murray S. Kucherawy]

[please subscribe to the list before replying]

On Thu, 21 Mar 2013, Chris Meidinger wrote:
> I have been working on setting up opendmarc on a test machine today, and 
> am running into an issue that I'm not finding a good way to debug. I'm 
> hoping someone can help me.
>
> I am using sendmail with opendkim and an SPF checker before opendmarc, 
> both of those pass, but dmarc fails:
>
> Authentication-Results: dmz205.smi-training.net/r2LMVHUn013122; dmarc=fail header.from=dmz205.smi-training.net
> Authentication-Results: dmz205.smi-training.net; dkim=pass (1024-bit key) header.i=@dmz205.smi-training.net header.b=fUcrnROO; dkim-adsp=pass
> Authentication-Results: dmz205.smi-training.net; spf=PASS (sender IP is 192.168.200.205) smtp.mailfrom=chris at dmz205.smi-training.net

What is the order of filters you've specified in your sendmail 
configuration?  opendmarc has to come after opendkim and your SPF filter 
in order for it to see their results.

-MSK