[opendmarc-users] dmarc fail on internal emails

[Juri Haberland]

On 21.04.2017 23:06, Ian Evans wrote:

> Here's the current state of affairs after making the recommended changes:
> 
> Incoming email:
> 
> FROM Gmail TO my site: Headers show dkim, spf and dmarc pass
> FROM mysite to mysite: Headers show dkim pass. Dmarc fail, no spf headers
> present.
> 
> Safe to assume the internal mail is failing because a dmarc pass requires
> dkim and SPF passes and spf isn't present?

No, because DMARC os OR, not AND. Either DKIM pass or SPF pass (if aligned
that is) should result in a DMARC pass.

> Outgoing email:
> FROM my site to Gmail: Headers show DKIM pass, SPF pass, DMARC pass

Not relevant.

> Sending email to test at http://www.appmaildev.com/en/dkim shows spf pass,
> dkim pass and dmarc fail. If passed on gmail, faulty implementation on this
> site?

Just tried it, and just got "DMARC: ExistsRecord" - no pass and no fail, it
just checks for an existing DMARC record.

Would you mind sending me a mail from your domain?


  Juri