[opendmarc-users] Trusting/ignoring redirects from gmail servers

[A.Schulze]

Am 02.10.26 um 14:55 schrieb Simon B:
> This is an authentication failure report for an email message received from IP
> 2607:f8b0:4864:3b::2b on Fri,  2 Oct 2026 07:58:06 +0000 (UTC).
> 
> 
> Feedback-Type: auth-failure
> Version: 1
> User-Agent: OpenDMARC-Filter/1.4.2
> Auth-Failure: dmarc
> Authentication-Results: OpenDMARC.spamfreeisp.net; dmarc=fail
> header.from=nvidia.com
> Original-Envelope-Id: 4hx1Nr6WBDz1GDSd
> Original-Mail-From: xxxx at gmail.com
> Source-IP: 2607:f8b0:4864:3b::2b (mail-pz2-x2b.google.com)
> Reported-Domain: nvidia.com
> 
> ------------------------------------------------------------------------

Hi Simon,

a google-server sent a message, with an RFC5322.From Header *@nvidia.com to your server.
DMARC validation failed. You have configured your OpenDMARC instance to send a Failure-Report to (you?)
This is not the default. Also, nvidia.com does not request only aggregated reports, but no failure reports.
(which is a good setup @ nvidia.com)

So your configuration has something like this:

FailureReports            true
FailureReportsSentBy      <a local address in your domain>
#maybe: FailureReportsBcc <a local address in your domain>
#maybe: ReportCommand     </path/to/your/sendmail and some options>
#maybe: RejectFailures    true

OK.

The missing part of information is the result of a DKIM validation ...
`grep 4hx1Nr6WBDz1GDSd /path/to/your/mail.log` would help

And only with this information, we could say, what's happen

Andreas