[opendmarc-users] spf align question

[Murray S. Kucherawy]

On Fri, 29 Mar 2013, Andrei Ioachim wrote:
> I don't understand why spf alignment fails for this message:
>
> [removing the irrelevant header fields]
> 
> Return-Path: <andrei at inteligis.net>
> Authentication-Results: darkstar.newsbox.ro; dmarc=pass 
> header.from=inteligis.net
> Authentication-Results: darkstar.newsbox.ro;
> dkim=pass (1024-bit key) header.d=inteligis.net header.i=@inteligis.net 
> header.b=cKpZFWNm
> Authentication-Results: main.inteligis.ro; dmarc=none 
> header.from=inteligis.net
> From: Andrei Ioachim <andrei at inteligis.net>
> Reply-To: andrei at inteligis.net
>
> so, I get Authentication-Results: darkstar.newsbox.ro; dmarc=pass 
> header.from=inteligis.net and in the aggregate report received on 
> inteligis.net i have:
>
> <policy_published>
>  <domain>inteligis.net</domain>
>  <adkim>r</adkim>
>  <aspf>r</aspf>
>  <p>none</p>
>  <pct>100</pct>
> </policy_published>
> <record>
>  <row>
>   <source_ip>2001:470:1f13:950::1</source_ip>
>   <count>1</count>
>   <policy_evaluated>
>    <disposition>none</disposition>
>    <dkim>pass</dkim>
>    <spf>fail</spf>
>   </policy_evaluated>
>  </row>
>  <identities>
>   <header_from>inteligis.net</header_from>
>  </identities>
>  <auth_results>
>   <spf>
>    <domain>inteligis.net</domain>
>    <result>pass</result>
>   </spf>
>   <dkim>
>    <domain>inteligis.net</domain>
>    <result>pass</result>
>   </dkim>
>  </auth_results>
> </record>
>
> spf check is passed but it's not aligned and i don't understand why

There's a bug in here somewhere.  In fact, SPF didn't pass because there's 
no Authentication-Results revealing an SPF result for opendmarc to use. 
I'll try to reproduce it and open a bug if so.

-MSK