[opendmarc-users] SPF pass with alignment, yet DMARC fail?

[Thomas Sturm]

Hello,

I'm struggling to understand these Authentication-Results headers created by opendmarc-1.3.1:

Received: from rbsgc.com (smtp10.rbsgc.com [146.121.21.36])
Authentication-Results: hostname; dmarc=fail header.from=rbs.com
Authentication-Results: hostname; spf=pass smtp.mailfrom=example_at_rbs.com
Authentication-Results: hostname; dkim=none
From: "Example" <example_at_rbs.com>

SPFSelfValidate is active here and writes a correct result for SPF. The SPF-authenticated mailfrom domain aligns with the RFC5322.From. But still DMARC fails - why?

If a Received-SPF header is inserted and opendmarc doesn't have to do SPF on its own, the result is 'dmarc=pass'.

Cheers,
Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4117 bytes
Desc: not available
URL: <http://www.trusteddomain.org/pipermail/opendmarc-users/attachments/20161005/cb2a766f/attachment.bin>