Hi all,
Over the past few weeks I've been getting occasional DMARC_REJECT hits
on valid mail (e.g., from family, from valid bank emails, etc.). It's unclear
why this is happening since the SA report doesn't really give any information.
The score on DMARC_REJECT is +10, which is enough to throw these legit emails
into spam even with BAYES_00. (Those senders are also in whitelist_auth, but
that rule isn't hitting... I'm guessing the DMARC failure is causing this to be
considered non-auth, hence not whitelisted? Note that SPF_HELO_PASS hits fine.)
Can someone point me to a log message I can look up to figure out why those
messages are failing DMARC? In the meantime, I'll probably have to reduce the
score on that to avoid it being such a poison pill.
I'm not posting publicly-available samples here because these emails are ham,
and therefore can contain sensitive info. If someone like Kevin or John need
specific info I can forward specific samples privately (off-list).
Thanks!
--- Amir
