[opendmarc-users] Unexplainable dmarc=none instead of dmarc=fails as authentication result

Stefan Tittel stefan at tittel.net
Mon Oct 17 17:50:13 PDT 2016


On 2016-10-18 02:33, Tomki Camp wrote:

Hello Tomki,

thank you for your answer.

> it looks like by "dmarc=none" and "dmarc=fail", you're referring to
> the disposition field in XML, is this correct?

Unfortunately not. I am referring to the DMARC result given in the 
"Authentication Results" header of the mail itself:

Authentication-Results: myserver.mysite.com; dmarc=none 
header.from=example.com

According to RFC 7489 "dmarc=none" in this header means:
"No DMARC policy record was published for the aligned identifier, or no 
aligned identifier could be extracted."

And "dmarc=fail" means:
"A DMARC policy record was published for the aligned identifier, and 
none of the authentication mechanisms passed."

The aligned identified published a valid DMARC policy record, none of 
the authentication mechanisms passed and hence I would expect 
"dmarc=fail" instead of "dmarc=none".

Kind regards
Stefan


More information about the opendmarc-users mailing list