[opendmarc-users] SPF pass with alignment, yet DMARC fail?

[Juri Haberland]

On 05.10.2016 16:27, Thomas Sturm wrote:
> Hello,
> 
> I'm struggling to understand these Authentication-Results headers created by opendmarc-1.3.1:
> 
> Received: from rbsgc.com (smtp10.rbsgc.com [146.121.21.36])
> Authentication-Results: hostname; dmarc=fail header.from=rbs.com
> Authentication-Results: hostname; spf=pass smtp.mailfrom=example_at_rbs.com
> Authentication-Results: hostname; dkim=none
> From: "Example" <example_at_rbs.com>
> 
> SPFSelfValidate is active here and writes a correct result for SPF. The SPF-authenticated mailfrom domain aligns with the RFC5322.From. But still DMARC fails - why?

Hmm, I don't have a concrete idea of what goes wrong here, but 1.3.1 has
several issues that are SPF related. You might want to try a patched
version of 1.3.1 (see https://andreasschulze.de/dmarc/opendmarc how to get
there) or a patched version of the current 1.3.2-beta0 (see
http://batleth.sapienti-sat.org/projects/opendmarc/ how to get there).


  Juri