DMARC is not something I'm well-versed in, but was trying to do what tests I could. Would be interesting to see what would happen if someone deliberately tried to send from a non-SPF valid IP.
Normally, it just sorta works, but I've never actually seen the traffic it generates, or seen the software that is supposed to send it, so I'm unsure exactly how to poke it with a stick... :( Aloha, Michael. -- Sent from my Windows Phone ________________________________ From: Dickie LaFlamme<mailto:rlafla...@dyn.com> Sent: 4/14/2016 5:55 AM To: Michael Wise<mailto:michael.w...@microsoft.com> Cc: mailop@mailop.org<mailto:mailop@mailop.org> Subject: Re: [mailop] DMARC record in p=none not receiving aggregate reports to RUA My bad, I should have included this issue has spanned well over multiple days so the 24 hours rule wasn't a cause. I queued a few different customers I know with valid DMARC records and I'm seeing the “\” in front of the “;”’s. I will however dig into the greylisting. As always, thank you all for looking into this and helping out! Thanks, [Dyn logo, Dyn.com]<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdyn.com%2f&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=9BSgzaNWDGgPxSITHebCgnG%2f%2bzmwJrbd9OvZAfp%2fLuo%3d> [http://dyn.com/wp-content/uploads/2013/08/esignature-icon-dyn-twitter.png] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=iNW1wPjNcDEkAyXLN6OQ9zv7MTgBTff%2fh22VMfI5duM%3d> <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyninc&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=xUhxF0kd2YXPUrgPqMK9t3EnkqS%2fNRqlgOLWquT%2f6gc%3d> [Dyn facebook account] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ffacebook.com%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=ZJsJdDiJ%2fpEUizQaQST%2fr21VTcwNrwoapKIIcrcbFBI%3d> <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyninc&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=xUhxF0kd2YXPUrgPqMK9t3EnkqS%2fNRqlgOLWquT%2f6gc%3d> [Dyn LinkedIn account] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2flinkedin.com%2fcompany%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=6Flodk6OeXkOqEMnVVypjOZ90%2fBtC%2blpzokkkInA8UI%3d> Dickie LaFlamme / Deliverability Specialist [http://dyn.com/wp-content/uploads/2013/08/esignature-icon-phone.png] +1 603-296-1952 On Wed, Apr 13, 2016 at 9:22 PM, Michael Wise <michael.w...@microsoft.com<mailto:michael.w...@microsoft.com>> wrote: I see it slightly differently: $ host -t txt _dmarc.chinalovecupid.com<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdmarc.chinalovecupid.com&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=4p809FBj2ADK844OD74sclb52Pn3Nyu%2fmLA%2fM8MnFCQ%3d> _dmarc.chinalovecupid.com<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdmarc.chinalovecupid.com&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=4p809FBj2ADK844OD74sclb52Pn3Nyu%2fmLA%2fM8MnFCQ%3d> descriptive text "v=DMARC1\; p=none\; rua=mailto:dm...@chinalovecupid.com<mailto:dm...@chinalovecupid.com>" What’s with the “\” in front of the “;”’s? Aloha, Michael. -- Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been Processed." | Got the Junk Mail Reporting Tool<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.microsoft.com%2fen-us%2fdownload%2fdetails.aspx%3fid%3d18275&data=01%7c01%7cMichael.Wise%40microsoft.com%7c4a5fd44dcbe347ee0d5f08d36464199a%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=8XEh36oYSsYquP055DRdgwjdM%2bVOWgtSLTZfBUpqLVA%3d> ? From: Dickie LaFlamme [mailto:rlafla...@dyn.com<mailto:rlafla...@dyn.com>] Sent: Wednesday, April 13, 2016 6:02 PM To: Michael Wise <michael.w...@microsoft.com<mailto:michael.w...@microsoft.com>> Cc: mailop@mailop.org<mailto:mailop@mailop.org> Subject: Re: [mailop] DMARC record in p=none not receiving aggregate reports to RUA ha, no worries. That's fair enough. Here's the customers DMARC record. The domain ?:? chinalovecupid.com<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fchinalovecupid.com&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=hyC4gIkrzZR%2fDciqYLZ9KKBH3Cn5dzc312xNuzjA%2bFw%3d> v=DMARC1; p=none; rua=mailto:dm...@chinalovecupid.com<mailto:dm...@chinalovecupid.com> ?Again we know that this does not currently have the ?"pct=100" tag, but with or without the results have been the same. Thanks, [Image removed by sender. Dyn logo, Dyn.com]<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdyn.com%2f&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=snizrDv1dW5hmDG2c9T0AFXFSYYwshvzaTPVGR0n%2fQk%3d> [Image removed by sender.] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=3EQ%2fAJ8dZSiczQ99YMEiW%2bMlIfg0hmjFI5gqYrLqkzU%3d> <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyninc&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=gd8AkMpjOzvm5fw5NQtPSjuOBLoaIQ5oJQ5HScljMdw%3d> [Image removed by sender. Dyn facebook account] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ffacebook.com%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=fZ3itHieFSAy2R0ac4ZmmKaj0aC9tkgy0EmdDdWsZeU%3d> <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2ftwitter.com%2fdyninc&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=gd8AkMpjOzvm5fw5NQtPSjuOBLoaIQ5oJQ5HScljMdw%3d> [Image removed by sender. Dyn LinkedIn account] <https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2flinkedin.com%2fcompany%2fdyn&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=%2fZMbTTscSw7Vrb7kDqCgNmr2V1FkMmESxbmFKoiuHhg%3d> Dickie LaFlamme / Deliverability Specialist [Image removed by sender.] +1 603-296-1952<tel:603-296-1952> On Wed, Apr 13, 2016 at 8:43 PM, Michael Wise <michael.w...@microsoft.com<mailto:michael.w...@microsoft.com>> wrote: … as always, please let us know the customer’s real domain name (or IP address, or whatever) when making these requests. Not including that is about on par with the legendary complaints of: “ It Doesn’t Work. “ I Can’t Print. Etc, At some point, we’re going to ask you for it anyway, so best to just provide it at the start. Aloha, Michael. -- Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been Processed." | Got the Junk Mail Reporting Tool<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.microsoft.com%2fen-us%2fdownload%2fdetails.aspx%3fid%3d18275&data=01%7c01%7cMichael.Wise%40microsoft.com%7cd7b242b340c04fac17ec08d36400700d%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=FlP3r9KMf2HXfwj7n2SWZiwigROZBT2qGf4Tugx2Uds%3d> ? From: mailop [mailto:mailop-boun...@mailop.org<mailto:mailop-boun...@mailop.org>] On Behalf Of Dickie LaFlamme Sent: Wednesday, April 13, 2016 5:28 PM To: mailop@mailop.org<mailto:mailop@mailop.org> Subject: [mailop] DMARC record in p=none not receiving aggregate reports to RUA We have a customer who's setup a DMARC record with the correct TXT record; v=DMARC1; p=none; pct=100; rua=mailto:dmarc@<mailto:dmarc@>"customerspostmaster" after waiting the 24 hour period we still did not receive any aggregate reports to the mailbox. After some searching we advised the customer to try and take out "PCT" as that could possibly have been triggering something to not work correctly (shot in the dark try). Then after that attempt and no result I did some more research and found that in some instances reports can be huge and up to 10MB and denied by their internal servers. We then advised the customer to check their logs to make sure mail wasn't getting denied at their gateway. To no avail reports still are not being sent. Has anyone else run into this problem with customers when they're trying to receive aggregate reporting using a rua that is in house? If so I'd love to hear any troubleshooting you've tried as well as possible fixes for this. Thanks, Dickie LaFlamme
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
