On 24.07.23 16:03, Gomes, Rich via Postfix-users wrote:
Clarification below:

I see no clarification, just added disclaimer.
It says nothing about DMARC, just that the mail was sent from external organization.

From: Gomes, Rich via Postfix-users <[email protected]>
Sent: Monday, July 24, 2023 11:27 AM
To: [email protected]
Subject: [pfx] messages passing DMARC are being rejected as failing

CAUTION: This email was sent from an external sender. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.
Asking the hive mind to see if anyone has seen this behavior.

Application server sends reservation emails to postfix server running OpenDKIM, 
postfix sends directly to O365.
Our DMARC policy is in REJECT mode.
Messages are signed and the NAT is in our SPF record. Message headers state 
that the messages are passing DMARC, yet Gmail and Comcast are rejecting them 
stating they are failing DMARC.

I can send test emails using swaks on the postfix server to replicate the same 
pathway as the application server sending emails and these emails are delivered 
successfully
Comcast tech support has no idea where to even route my call and I haven't 
tried to engage with Gmail yet.


Has anyone see this specific behavior from Comcast and Gmail?

--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #98652: Operation completed successfully.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to