Wietse Venema: > James B. Byrne: > > <xxuse...@aol.com>: host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 > > : > > (DMARC) This message failed DMARC Evaluation and is being refused due to > > provided DMARC Policy (in reply to end of DATA command) > > ---> > > > > Has anyone have any idea what AOL might be complaining about WRT to our > > DMARC > > policy? > When DNS lookup fails with a SOFT error (timeout etc.) would they mistakenly respond with a HARD reject? We have examples of Google doing that (email from the same host and the same sender will occasionally be rejected).
I.e. from the same IP address. If your IPv4 or IPv6 address is not fixed, then mail may be rejected for several reasons. If the error is sporadic, you can use smtp_reply_filter to change this into a 4xx error. /etc/postfix/main.cf: smtp_reply_filter = pcre:/etc/postfix/smtp_reply.pcre /etc/postfix/smtp_reply.pcre /^5(\d+ )5(.+message failed DMARC Evaluation.+)/ replace 4${1}4${2} Wietse