[opendmarc-users] SPF pass with alignment, yet DMARC fail?

[Juri Haberland]

Juri Haberland wrote:
> Hi Thomas,
>
> On 06.10.2016 11:40, Thomas Sturm wrote:
>
>>> On 06.10.2016, at 09:07, Juri Haberland <juri at sapienti-sat.org> wrote:
>>>
>>> That is bad news - 1.3.2-beta0 + patches should behave like 1.3.1 + patches
>>> in that area.
>>>
>>> Looks like I need to dig deeper into that issue.
>
> I might be on to something here but I need some time to dig further through
> the source code and do some test.

That was a red herring - a problem within the rules file that is used to
generate the Debian packages for OpenDMARC. That led to erratic behaviour of
the SPF look-ups.

I'm currently running 1.3.2-beta0 + patches (see previous posts) and
self-validating just works (besides the fact that neutral is reported as
failed).

Using the test option of OpenDMARC I could not reproduce your problem - it
would pass both SPF and DMARC.

Thomas, can you give a bit more details about your setup? What OS; did you
compile it yourself or used a pre-build package? If you compiled it yourself,
what is the configure line used?
Can you query your SPF record from the machine in question?
When you tested 1.3.2-beta0, did you apply the patches from my page?


  Juri