On 05/30/2018 04:02 PM, RW wrote:
OK, but when you said "The failure seems to be a result of how DMARC amalgamates the two with published policies" I thought you were claiming some kind of anomalous behaviour.
Ah. Sorry for the confusion.
It's surely obvious that rewriting the envelope sender to a completely different domain will break SPF alignment in DMARC. There wouldn't be any point to DMARC if it didn't.
Agreed. DMARC is meant to detect / report such misalignments.I think DMARC is somewhat incompatible with the stated desired behavior of the SpamAssassin Users mailing list. The typical SOP that I see is to mung the From: header so that messages appear to be from / via the mailing list. This enables alignment between the envelope and the From: header.
This obviously breaks DKIM. Which IMHO means that old (broken) DKIM needs to be stripped and (ideally) new DKIM signatures added as messages egress the list.
That was informational, some people do make that mistake.
ACK -- Grant. . . . unix || die
smime.p7s
Description: S/MIME Cryptographic Signature
