On Sun, 25 Apr 2021, Wayne via Exim-users wrote:
I'm using EXIM, though I don't believe this is an EXIM specific issue.
Perhaps someone on this list has run into this before.
I've used a few different tools to verify my SPF, DKIM and DMARC DNS
records to ensure they are valid. If I send an email to my gmail
account, open the message, click on the menu on the right side of the
message and choose "show original". The table at the top of the
message contains "DKIM: 'PASS' with domain useunix.net".
While viewing the original, I can see in the received headers that
gmail adds:
ARC-Authentication-Results: i=1; mx.google.com;
I *think* Google values ARC above DMARC.
dkim=pass [email protected] header.s=dkim-2020090201
header.b=jKl5NQPj;
spf=pass (google.com: domain of [email protected] designates
172.104.219.156 as permitted sender) [email protected];
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE)
header.from=useunix.net
So DKIM, SPF and DMARC all pass.
If I send to my gmail account from my office, which uses O365, and
view the original the table at the top has entries for DKIM but also
for SPF and DMARC.
SPF: PASS with IP X.X.X.X
DKIM: 'PASS' with domain myworkdomain.com
DMARC: 'PASS'
Any idea why the discrepancy in the fields that gmail displays at the
top of the message? I must have something configured incorrectly
somewhere, but gmail doesn't make it easy for me to determine what the
issue is.
The difference could be that yours has ARC headers, or that Google
has special handling for O365, but the evidence suggests that
Google are happy with what you are doing.
--
Andrew C. Aitchison Kendal, UK
[email protected]
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
