[opendmarc-users] Missing dmarc results header on incoming mail

[Simon Wilson]

Hi all, I've just implemented opendmarc for inbound dmarc checking on  
my postfix mail server. I have been checking SPF and DKIM inbound for  
years.

In a nutshell things appear to all be running, but I'm not sure on  
sequence, and I'm not seeing a dmarc Authentication-Results header  
from opendmarc.

I have postfix using postfix-policyd-spf. That triggers first, and  
adds a Received-SPF header with its result.

Then the logs show opendmarc triggering (it's called as an  
smtpd_milter from postfix's main.cf) I have opendmarc set to trust  
existing SPF results in the headers. The logs show success, e.g.:

Jul 14 22:28:40 emp07 opendmarc[17024]: 6FEF0309B0D1: bhpbilliton.com pass

Then the logs show postfix sending to amavisd-new (it's set up on port  
10024, processes, then sends back to postfix), which does DKIM  
validation, and adds an Authentication-Results header, e.g.  
Authentication-Results: mail.simonandkate.net (amavisd-new); dkim=pass

Amavisd-new runs spamassassin, and it is applying rules as I'd expect  
for SPF and DKIM.

End result in the email headers I see the Received-SPF header, a  
DMARC-Filter header with the version and server name (but no results),  
and a single DKIM Authentication-Results header.

I've tried doing DKIM validation in opendkim instead of amavisd-new,  
but the result is the same (except for the DKIM result header coming  
from opendkim instead of amavisd-new).

- Is this all behaving as expected?
- Why am I not seeing a dmarc results header?
- And am I sequencing things correctly?

Thanks
Simon.

-- 
Simon Wilson
M: 0400 12 11 16