[opendmarc-users] Problems with 1.3.2~Beta0..deb and this mailing list failing DMARC

Mick debacletw8 at rs432.net
Mon Nov 7 14:17:18 PST 2016


Hello everyone,

I upgraded my Debian packages this morning (Debian 9 [stretch] testing) 
and OpenDmarc was upgraded to;
[opendmarc_1.3.2~Beta0+dfsg-2_amd64.deb]
.... but after the upgrade OpenDmarc failed to start.

systemd[1]: Failed to start OpenDMARC Milter.
systemd[1]: opendmarc.service: Unit entered failed state.
systemd[1]: opendmarc.service: Failed with result 'exit-code'.
systemd[1]: opendmarc.service: Service hold-off time over, scheduling 
restart.
systemd[1]: Stopped OpenDMARC Milter.
systemd[1]: opendmarc.service: Start request repeated too quickly.
systemd[1]: Failed to start OpenDMARC Milter.
systemd[1]: opendmarc.service: Unit entered failed state.
systemd[1]: opendmarc.service: Failed with result 'start-limit-hit'.

I tried removal, purging and finally removing dependencies before 
re-installing, still to no avail so have downgraded back to
[opendmarc_1.3.1+dfsg-4_amd64.deb] using the apt archive cache.
Thankfully good old faithful 1.3.1 is working fine (once again).

Packages do break on the testing version of Debian I know, but usually 
they are 'kept back' if there are any dependency issues rather than 
install. Have any dependencies changed? I've only mention this here in 
case those responsible for "Debianising" OpenDmarc may read this list 
and be interested.


***DMARC problem with the OpenDmarc email list***

I recently received a notification from this list informing me that my 
email address was suspended due to the large number of bounces. When I 
looked into it, it seems the reason for the bounces is due to the list 
failing DMARC. The from header comes from the sender, rather than the 
list, so if sender A has p=reject set in their DNS, I reject the message 
as my installation has RejectFailures set to true. I also have p=reject 
set so I assume that subscribers who have 'RejectFailures true' will not 
receive this message (lucky them! ;-) ).

To try and prevent bounces from my end, I have just added 208.69.40.157 
to 'ignore.hosts'. Will that work? I will find out shortly I guess.


Best wishes,

Mick.


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus



More information about the opendmarc-users mailing list