[opendmarc-users] OpenDMARC-milter detects only "fail" after upgrade

[Benny Pedersen]

Benny Pedersen skrev den 2018-04-05 17:49:
> Jonathan Sélea skrev den 2018-04-05 16:51:
> 
>> Apr  5 16:25:26 hashmal opendmarc[16756]: C61E549C20: selea.se pass
>> 
>> Any other logs that is more relevant? Or can I enable more detailed 
>> logging?
> 
> Authentication-Results: linode.junc.eu; dmarc=fail (p=none dis=none)
> header.from=selea.se
> Authentication-Results: linode.junc.eu;
> 	dkim=fail reason="signature verification failed" (2048-bit key)
> header.d=selea.se header.i=@selea.se header.b=hkd/NGr2;
> 	dkim-atps=neutral
> 
> hmm
> 
> can it be edns0 ?
> 
> maybe your dns hoster blocks it ?
> 
> try one with key size 512, i know its below 1024, but if thats pass we 
> know more

followup

Authentication-Results: medusa.blackops.org;
	dkim=fail reason="signature verification failed" (1024-bit key; 
unprotected) header.d=junc.eu header.i=@junc.eu header.b=ZSy/GB6b;
	dkim-atps=neutral

so maillist braeks dnssec

but remember if spf gives pass it will in some cases be dmarc pass 
aswell even if dkim fails

https://dane.sys4.de/smtp/selea.se
https://dane.sys4.de/smtp/junc.eu

might be irrelevant :=)