[opendmarc-users] Why did this one fail?

[Benny Pedersen]

On 2021-08-06 23:22, postfix at ptld.com wrote:
> I had an email sent to me from another mailing list. The sender
> envelope was the mailing list and the header-from was my email
> address.
> 
>   DKIM: mx.kolabsys.com [95.128.36.23] not internal
>   DKIM: not authenticated
>   DKIM: message has signatures from kolabsys.com, ptld.com
>   DKIM: DKIM verification successful
>   DMARC: ignoring Authentication-Results at 4 from 
> ext-mx-out002.kolabsys.com
>   DMARC: ignoring Authentication-Results at 11 from 
> ext-mx-out002.kolabsys.com
>   DMARC: ignoring Authentication-Results at 16 from 
> ext-mx-in002.kolabsys.com
>   DMARC: SPF(mailfrom): lists.roundcube.net none
>   DMARC: ptld.com fail
> 
> The SPF was none not failed, and the DKIM verified. I thought as long
> as at least SPF or DKIM checks out then DMARC should pass.

its safe to ignore dmarc fail from maillists, or try opendmarc from 
github trunk, if you use opendmarc stable it still contains bugs, to 
make all milters stable with postfix use smtp_milter_maps so mails from 
maillists is never rejected based on dmarc fail, you should not reject 
maillist anyway