[opendmarc-users] troubleshooting an opendmarc 1.3.1 auth failure?

[jasonsu at mail-central.com]

>> On Tue, May 10, 2016, at 12:30 AM, Patrick Ben Koetter wrote:
> * Juri Haberland <juri at sapienti-sat.org>:

Thanks, both, for the comments/info re: the mixing of milters/filters. ( no prob with the German! ;-) )

In any case, it's clear I'd better get this understood, before I cause myself problems :-/

TBH, I don't understand yet why that's a problem when there are different smtpd instances -- one doing the SPF check, one doing the DKIM check, and one doing the DMARC check.  I thought that in that case the message simply gets checked, then passed along.  

Local relay/delivery happens after all my checks, and again has its own smtpd instance.  It clearly gets the complete message for delivery ... as the whole message gets delivered.

What am I missing here?

Also, in my OP, that's just one example of a fail.  non-spam mail reports successful delivery

Here, for example, are headers from a subsequent, successful, non-spam message.  As you can see, spf, dkim, and dmarc checks all appear to be completed, and content is spam-scored

	X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
		mail.example.com
	X-Spam-Scanned: spamassassin at amavis.mail.example.com
	X-Spam-Flag: NO
	X-Spam-Score: 1.833
	...
	DMARC-Filter: OpenDMARC Filter v1.3.1 mail.example.com 2d7l8g9gTLd4bbf
	Authentication-Results: dmarc.mail.example.com/2d7l8g9gTLd4bbf; dmarc=none header.from=e.hertzusa.brierleycrm.com
	...
	Authentication-Results: mail.example.com (amavisd-new);
		dkim=pass (1024-bit key) header.d=e.hertzusa.brierleycrm.com
	...
	Authentication-Results: spf.mail.example.com; spf=pass (sender SPF authorized) smtp.mailfrom=bounce.e.hertzusa.brierleycrm.com (client-ip=141.206.150.29; helo=onfize-twni.cainus.teradatadmc.com; envelope-from=g-4... at bounce.e.hertzusa.brierleycrm.com; receiver=user at example.com)

So I admit to being a little confused -- if what you suggest is the case, that "milters+filters" won't work, why I am I seeing success here?

Jason