[opendmarc-users] OpenDMARC-milter detects only "fail" after upgrade

[Jonathan Sélea]

Config:

AuthservID hostnameofmailserver
FailureReports true
PidFile /var/run/opendmarc.pid
RejectFailures false
Socket inet:8893 at localhost
SoftwareHeader true
Syslog true
SyslogFacility mail
TrustedAuthservIDs hostnameofmailserver
HistoryFile /var/run/opendmarc/opendmarc.dat
UMask 0002
UserID opendmarc
PublicSuffixList /etc/opendmarc/effective_tld_names.dat


This is what is logged in mail.log:
Apr  5 16:27:33 hashmal opendmarc[16756]: 6B39449C20: vgnet.nl fail
Apr  5 16:27:49 hashmal opendmarc[16756]: 7C79149C20: swetrust.com fail
Apr  5 16:29:59 hashmal opendmarc[16756]: DB9E949C33: selea.tech fail
Apr  5 16:31:11 hashmal opendmarc[16756]: 35AD749C22: github.com fail
Apr  5 16:43:07 hashmal opendmarc[16756]: 312B349C28: us.ibm.com fail
Apr  5 16:47:42 hashmal opendmarc[16756]: 0521D49C28: selea.se fail

I can confirm that DKIM + SPF is aligning here, but OpenDMARC seems to 
fail validating that.
On another note, OpenDMARC do apply "Pass" when I get back the email I 
sent to this mailing list:

Apr  5 16:25:26 hashmal opendmarc[16756]: C61E549C20: selea.se pass

Any other logs that is more relevant? Or can I enable more detailed 
logging?

/ Jonathan

On 2018-04-05 16:22, A. Schulze wrote:
> Jonathan Sélea:
> 
>> After upgrading to OpenDMARC Filter v1.3.2, opendmarc seems to not
>> validate domains successfully even if the DKIM + SPF does align.
>> 
>> 
>> I did not replace the config file during upgrade, instead I kept it 
>> from
>> opendmarc version 1.2.
>> 
>> 
>> opendmarc: OpenDMARC Filter v1.3.2
>>     SMFI_VERSION 0x1000001
>>     libmilter version 1.0.1
>>     Active code options:
>>         WITH_SPF
>>         WITH_SPF2
> 
> 
> show your config, logs and ideally a full message that fail
> 
> Andreas
> 
> 
> _______________________________________________
> opendmarc-users mailing list
> opendmarc-users at trusteddomain.org
> http://www.trusteddomain.org/mailman/listinfo/opendmarc-users