Package: opendmarc
Version: 1.3.0+dfsg-1
Hi,
I started importing opendmarc into a database and I'm trying to
understand what all the data is. In the messages table I
currently see:
opendmarc=> select spf, count(*) from messages group by spf;
spf | count
-----+-------
-1 | 12229
1 | 250
2 | 8
0 | 188
(4 rows)
opendmarc-reports changes that into:
case 0 { $spfresultstr = "pass"; }
case 2 { $spfresultstr = "softfail"; }
case 3 { $spfresultstr = "neutral"; }
case 4 { $spfresultstr = "temperror"; }
case 5 { $spfresultstr = "permerror"; }
case 6 { $spfresultstr = "none"; }
case 7 { $spfresultstr = "fail"; }
case 8 { $spfresultstr = "policy"; }
case 9 { $spfresultstr = "nxdomain"; }
case 10 { $spfresultstr = "signed"; }
case 12 { $spfresultstr = "discard"; }
else { $spfresultstr = "unknown"; }
So both -1 and 1 are "unknown". That doesn't seem to be making
much sense to me. I think most of those -1's come from domains
that do not publish SPF results, so I would expect the result to
be 6 instead of -1.
I think the 1s are actually SPF pass cases, at least for the few I
tried to look at.
In any case, the number of SPF passes seems to be too low, even if
both 0 and 1 are pass, lots more results actually have an SPF pass.
I also find it weird that the spfresultstr has the same cases as
the dkimresultstr.
Kurt
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]