[pfx] Re: dmarc, dkim & spf failed but that message was delivered anyway

> On 10. 3. 2025., at 09:02, Petko Manolov wrote: > > I was thinking about something similar. However, this filtering rule would > reject all mail that comes from postfix.org mailing > lists, which isn't an > option. Maybe this one combined with another rule, but i need

[pfx] Re: dmarc, dkim & spf failed but that message was delivered anyway

> On 6. 3. 2025., at 09:28, Petko Manolov via Postfix-users > wrote: > > The goal was to have my dmarc config as tight as possible. Namely: > > SPFSelfValidate true > SPFIgnoreResults true > RejectFailures true > > Quoting dmarc documentation re the latter: " If set, messages will be > rej

[pfx] Re: openarc and forwarding to gmail

It will not work. This DKIM signature will never authenticate because the key length must be of least 1024 bits. What you can do as a forwarder: 1. Rewrite envelope sender using a SPF enabled domain that you control. (SRS) 2. DKIM Sign message using a domain that you control, while keeping any