[opendmarc-users] SPF pass with alignment, yet DMARC fail?

[Juri Haberland]

On 2016-10-11 15:41, Juri Haberland wrote:
> On 2016-10-11 13:47, Thomas Sturm wrote:
> 
> Hi Thomas,
> 
>> I compiled 1.3.2-beta0 with all the patches as described here [1]
>> again. I compiled with libspf2. Then I tested this email [2] as
>> follows:

>> ### INSHEADER: idx=1 hname='Authentication-Results'
>> hvalue=‘example-hostname; spf=fail smtp.mailfrom=example at rbs.com'
>> ### SETREPLY: rcode='550' xcode='5.7.1' replytxt='rejected by DMARC
>> policy for rbs.com'

> Hmm, running 1.3.2-beta0 + patches here with your config and your mail 
> gives:

> ### INSHEADER: idx=1 hname='Authentication-Results'
> hvalue='example-hostname; spf=pass smtp.mailfrom=example at rbs.com'
> ### INSHEADER: idx=1 hname='Authentication-Results'
> hvalue='example-hostname; dmarc=pass (p=reject dis=none)

> So everything works here as expected. BTW - there is a little error in
> the README of OpenDMARC: It is OPENDMARC_TEST_HELOHOST, not
> OPENDMARC_TEST_HELONAME, but it makes no difference in your case. Will
> create a ticket later and add a corresponding patch to collection
> later.
> 
> I assume you ran 'make install' after compiling the beta0...
> Please run `ldd /path/to/opendmarc` and see if it can find all libs.
> And what is the configure cpmmand line that you used?

Ok, I can reproduce your results now if I run configure without telling 
it where to look for the libspf2 includes and library.

Here is what I use (taken from the Debian/ubuntu package by Scott 
Kitterman):


./configure --prefix=/usr --mandir=/usr/share/man 
--infodir=/usr/share/info --sysconfdir=/etc LDFLAGS="-lresolv 
-Wl,-z,defs -L/usr/lib/libmilter" --enable-filter-tests --with-spf 
--with-spf2-include=/usr/include/spf2 --with-spf2-lib=/usr/lib 
--with-sql-backend


   Juri