<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hey,<br>
<br>
I'm not sure if your openmdarc is working correctly. You got a SPF
pass, which is correct (I checked it manually), so this mail should
already be legitimate. Probably opendmarc is not able to read the
SPF header inserted by policyd-spf. I had some similar issues so I
compiled openmdarc with self validation and set the flags "<i>SPFIgnoreResults"
and "</i><i>SPFSelfValidate"</i> (see:
<a class="moz-txt-link-freetext" href="http://www.trusteddomain.org/opendmarc/opendmarc.conf.5.html">http://www.trusteddomain.org/opendmarc/opendmarc.conf.5.html</a>) in <i>opendmarc.conf</i><i>
</i>and now it works without any problems.<i><br>
</i><br>
Regards,<br>
Christoph<i><br>
<br>
</i>
<div class="moz-cite-prefix">Am 2014-09-16 um 11:56 schrieb Jochen
Fahrner:<br>
</div>
<blockquote cite="mid:54180940.40800@fahrner.name" type="cite">
<pre wrap="">Hi,
I got a mail from dhl.com that was rejected by opendmarc. Could a
missing DKIM signature be the cause? How can I workaround this issue?
Sep 16 09:51:19 s2 postfix/postscreen[23443]: CONNECT from
[149.239.170.7]:65017 to [78.46.184.248]:25
Sep 16 09:51:25 s2 postfix/postscreen[23443]: PASS NEW [149.239.170.7]:65017
Sep 16 09:51:26 s2 postfix/smtpd[23452]: connect from
ppd07007.deutschepost.de[149.239.170.7]
Sep 16 09:51:26 s2 opendmarc[1235]: configuration reloaded from
/etc/opendmarc.conf
Sep 16 09:51:27 s2 policyd-spf[23464]: None; identity=helo;
client-ip=149.239.170.7; helo=ppd07007.deutschepost.de;
<a class="moz-txt-link-abbreviated" href="mailto:envelope-from=noreplyksdhlpaket@dhl.com">envelope-from=noreplyksdhlpaket@dhl.com</a>; <a class="moz-txt-link-abbreviated" href="mailto:receiver=jf@fahrner.name">receiver=jf@fahrner.name</a>
Sep 16 09:51:27 s2 policyd-spf[23464]: Pass; identity=mailfrom;
client-ip=149.239.170.7; helo=ppd07007.deutschepost.de;
<a class="moz-txt-link-abbreviated" href="mailto:envelope-from=noreplyksdhlpaket@dhl.com">envelope-from=noreplyksdhlpaket@dhl.com</a>; <a class="moz-txt-link-abbreviated" href="mailto:receiver=jf@fahrner.name">receiver=jf@fahrner.name</a>
Sep 16 09:51:27 s2 postfix/smtpd[23452]: 4FE46341F9:
client=ppd07007.deutschepost.de[149.239.170.7]
Sep 16 09:51:27 s2 postfix/cleanup[23466]: 4FE46341F9:
message-id=<731602045.54671410853878467.JavaMail.daycq@af7lk060>
Sep 16 09:51:27 s2 opendkim[23233]: 4FE46341F9: ppd07007.deutschepost.de
[149.239.170.7] not internal
Sep 16 09:51:27 s2 opendkim[23233]: 4FE46341F9: not authenticated
Sep 16 09:51:28 s2 opendkim[23233]: 4FE46341F9: no signature data
Sep 16 09:51:28 s2 opendmarc[1235]: 4FE46341F9: dhl.com fail
Sep 16 09:51:28 s2 postfix/pickup[22799]: 12C3A34217: uid=118
from=<opendmarc>
Sep 16 09:51:28 s2 postfix/cleanup[23471]: 12C3A34217:
message-id=<a class="moz-txt-link-rfc2396E" href="mailto:20140916075128.12C3A34217@s2.fahrner.name"><20140916075128.12C3A34217@s2.fahrner.name></a>
Sep 16 09:51:28 s2 opendkim[23233]: 12C3A34217: DKIM-Signature header
added (s=mail, d=fahrner.name)
Sep 16 09:51:28 s2 postfix/cleanup[23466]: 4FE46341F9: milter-reject:
END-OF-MESSAGE from ppd07007.deutschepost.de[149.239.170.7]: 5.7.1
rejected by DMARC policy for dhl.com; from=<a class="moz-txt-link-rfc2396E" href="mailto:noreplyKSDHLPaket@dhl.com"><noreplyKSDHLPaket@dhl.com></a>
to=<a class="moz-txt-link-rfc2396E" href="mailto:jf@fahrner.name"><jf@fahrner.name></a> proto=ESMTP helo=<ppd07007.deutschepost.de>
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
opendmarc-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:opendmarc-users@trusteddomain.org">opendmarc-users@trusteddomain.org</a>
<a class="moz-txt-link-freetext" href="http://www.trusteddomain.org/mailman/listinfo/opendmarc-users">http://www.trusteddomain.org/mailman/listinfo/opendmarc-users</a>
</pre>
</blockquote>
<br>
</body>
</html>