On Tue, 2020-06-02 at 17:04 +0200, Benoit Panizzon via mailop wrote: > _DMARC.imp.ch descriptive text "v=DMARC1; p=none; rua=mailto: > dmarc-rep...@imp.ch; ruf=mailto: dmarc-rep...@imp.ch ; > aspf=s"(reverted to p=none) > That email was sent from: 2001:4060:1:1002::139:139 which passes SPF. > Any idea what is going wrong? Is Gmail's DMARC implementation broken > and REQUIRES DKIM violating RFC?
Without seeing the actual message my guess is that the aspf=s is the problem. This is telling receivers that you want to enforce strict SPF alignment, which means the FQDNs used the SPF tests must match. So, if your 5321.From is using a sub-domain then this will fail a DMARC test in the absence of DKIM. Ken.
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop