[opendmarc-users] OpenDMARC-milter detects only "fail" after upgrade

[Karol Augustin]

On 05/04/2018 06:54 PM, Jonathan Sélea wrote:
>>> to focus on Jonathan problem:
>>>
>>> looks like "SPFSelfValidate yes" should be added unless he run a
>>> dedicated SPF validation application he did not mention.
>>
>> is opendmarc 8bitmime safe ?
>>
>> i remember it was needed to disabled 8bitmime with amavisd when it was used as dkim signer
> 
> 
> "SPFSelfValidate yes" was not added before, I thought that Postfix
> took care of that actually.
> I do get "Pass" on thoose domains I failed on before now and that does
> not generate a Failure Report so that's great!
> 
> To answer the previous questions:
> I do use amavisd-new to sign outgoing emails, and OpenDMARC to
> validate incoming (or I intended it to do so). I should probably let
> OpenDKIM do that?
> 
You need both, openDKIM and openDMARC. openDMARC takes input from
openDKIM to evaluate DKIM part of DMARC. So you need to have two milters
in Postfix, first openDKIM and than openDMARC.

k.


-- 
Karol Augustin
karol at augustin.pl
http://karolaugustin.pl/
+353 85 775 5312