[opendmarc-users] opendkim 1.3.1 working ok here in most cases; why is this one inbound email failing auth?

[Juri Haberland]

On 11.06.2016 21:15, jasonsu at mail-central.com wrote:
> On Sat, Jun 11, 2016, at 11:54 AM, Juri Haberland wrote:
>> Well, what about your OpenDMARC config?

> Here it is.  But like I said it's the same as before, and it's working just fine for virtually all inbound email.

Ah, ok, forgot about that.

>> See the three different AuthservIDs?
> 
> Sure, that's how I set it up.

Unusual, but ok.

I guess that the history file is already imported into the database. If
not, can you extract the data for this email? If it is in the database, you
get the relevant data by doing the following SQL queries:

SELECT messages.id, messages.disp, d1.name, d2.name, messages.spf,
messages.align_spf, messages.align_dkim FROM messages
JOIN domains d1 ON messages.from_domain = d1.id
JOIN domains d2 ON messages.env_domain = d2.id
WHERE messages.jobid = '3rRl504yPvz2wZZ';

... and ...

SELECT domains.name, pass FROM signatures JOIN domains ON signatures.domain
= domains.id WHERE signatures.message = XXXX

In the second query above you need to replace XXXX with the first number
returned by the first query (my SQL knowledge is limited...).

What I'm looking for is what OpenDMARC thought about the
Authentication-Results...


  Juri