On 23/10/2020 09:27, Nick Tait wrote:
On 22/10/20 6:13 am, PGNet Dev wrote:
Before I take this up as an opendmarc question (my config &/or bug),
& do more thorough digging re: intuit's published records,
(1) Is there anything obviously wrong/missing in that^ XCLIENT usage
generally, or in the specific intuit.com case above, that would
suggest a cause for the dmarc/milter FAIL, that 1st needs fixing?
I _suspect_ not, given the success with all _other_ domains ...
Two ideas:
1. Configure the HistoryFile option in /etc/opendmarc.conf, and see
what gets written to that file?
2. I presume you have "RejectFailures true" in /etc/opendmarc.conf
currently? Try changing that to false, to allow the email to be
delivered, and then see what Authentication-Results headers get
added? (E.g. They might suggest something like an alignment failure?)
+1, and when doing this you might want to redirect emails that fail
DMARC into a special mailbox, something like:
/etc/postfix/main.cf:
...
milter_header_checks = pcre:/etc/postfix/milter_header_checks.pcre
...
/etc/postfix/milter_header_checks.pcre:
/^Authentication-Results: yourauthid_here.*dmarc=fail \(p=reject/
REDIRECT your_chosen@mailbox
