Mackenzie Taiaroa via Exim-users wrote on 17.08.2023 4:57: > Good day Victor (and Jeremy!),
Hello > Thanks for your advice, super on point regarding the issues I've been > facing. I've had this project on hold for awhile and just picking it up now > so apologies for the tardy response. > > I was sceptical about building Exim with ARC authentication - being an > experimental feature and not widely adopted anyhow, Building exim with ARC support does not solve the "arc" and "arc_policy" fields problem. > so I'm glad there's a > workaround to disable arc authentication in opendmarc. > > I've patched opendmarc and exim and also updated the opendmarc SQL as > you've recommended. > > The opendmarc patch and SQL modifications are working like a charm! However > unfortunately the exim patch hasn't resolved the lack of SPF/DKIM details > being logged to the dmarc history file. patch-src__exim-4.96-fix-opemdmarc-1.4.x-history_file.patch just outputs a DKIM selector to the file to fix problems with the dmarc_history_file format. > Sorry to trouble you further, but do you have any other ideas? here's a > debug output from Exim for a delivery: https://pastebin.com/iZEiEHu9 > > The corresponding delivery log in the dmarc history file: What exactly do you mean by "the lack of SPF/DKIM details being logged to the dmarc history file"? Can you show what you are missing in the report using the example of DMARC aggregate report from noreply-dmarc-supp...@google.com or from dmarcrep...@microsoft.com? > reporter server.hostname.com.au > received 1692234968 > ipaddr 209.85.215.171 > from gmail.com > mfrom gmail.com > spf 0 > dkim gmail.com 0 > pdomain gmail.com > policy 15 > rua mailto:mailauth-repo...@google.com > pct 100 > adkim 114 > aspf 114 > p 110 > sp 113 > align_dkim 4 > align_spf 4 > action 2 > > And also the delivery information in the exim mainlog: > > 2023-08-17 11:16:06.760 [2565238] SMTP connection from > [209.85.215.171]:56649 I=[103.209.24.57]:25 (TCP/IP connection count = 1) > 2023-08-17 11:16:07.591 [2565282] SPF validation passed > 2023-08-17 11:16:08.276 [2565282] 1qWRcO-00AlLW-0O DKIM validation passed > 2023-08-17 11:16:08.276 [2565282] 1qWRcO-00AlLW-0O DKIM: d=gmail.com > s=20221208 c=relaxed/relaxed a=rsa-sha256 b=2048 t=1692234966 x=1692839766 > [verification succeeded] > 2023-08-17 11:16:08.561 [2565282] 1qWRcO-00AlLW-0O H= > mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25 > Warning: "SpamAssassin as sslreservedsite detected message as NOT spam > (-0.2)" > 2023-08-17 11:16:08.565 [2565282] 1qWRcO-00AlLW-0O DMARC results: > spf_domain=gmail.com dmarc_domain=gmail.com spf_align=yes dkim_align=yes > enforcement='Accept' > 2023-08-17 11:16:08.567 [2565282] 1qWRcO-00AlLW-0O H= > mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25 > Warning: DMARC STATUS: accept gmail.com > 2023-08-17 11:16:08.576 [2565282] 1qWRcO-00AlLW-0O <= macken...@gmail.com H= > mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25 > P=esmtps L.- X=TLS1.3:TLS_AES_128_GCM_SHA256:128 CV=no SNI= > mail.demo-domain.com.au S=4704 M8S=0 DKIM=gmail.com RT=0.151s id=CAD2o6Gz8F= > mvwjj0n0w-fdmxu8w7zavmsiya3r_f+eon42n...@mail.gmail.com T="test" from < > macken...@gmail.com> for i...@demo-domain.com.au > 2023-08-17 11:16:08.593 [2565296] cwd=/var/spool/exim 6 args: > /usr/sbin/exim -d=0xf7795cfd -MCd daemon-accept-delivery -Mc > 1qWRcO-00AlLW-0O > 2023-08-17 11:16:08.730 [2565282] SMTP connection from > mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25 closed > by QUIT > 2023-08-17 11:16:08.742 [2565296] 1qWRcO-00AlLW-0O => info < > i...@demo-domain.com.au> F=<macken...@gmail.com> P=<macken...@gmail.com> > R=virtual_user T=dovecot_virtual_delivery S=4923 C="250 2.0.0 < > i...@demo-domain.com.au> wQpQKdh03WS2JCcAK/qN0w Saved" QT=0.470s DT=0.069s > 2023-08-17 11:16:08.743 [2565296] 1qWRcO-00AlLW-0O Completed QT=0.621s > > Thanks again for your help. > > All the best, > *Mackenzie* > -- Best wishes Victor Ustugov mailto:vic...@corvax.kiev.ua public GnuPG/PGP key: https://victor.corvax.kiev.ua/corvax.asc -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
