> >https://pastebin.com/s032ndrA > > > >It's not only hitting DMARC_REJ_NO_DKIM and DMARC_FAIL_REJECT, but > > where did you get these from?
I just realized these are from my local rules, put together from a conversation many years ago, apparently from before SA had built-in DMARC support. https://www.mail-archive.com/users@spamassassin.apache.org/msg95643.html > DMARC is built on header From:, this needs either correct DKIM, or correct SPF > with envelope from domain equal to header From: domain. > > this message has no DKIM signature. policy is reject: > > _dmarc.deltra.de. 86400 IN TXT > "v=DMARC1;p=reject;rua=mailto:postmas...@deltra.de" Ah yes, thanks. > and spf is unapplicable since the envelope from is null. Isn't that the case with all bounce messages? > >It's also somehow hitting BAYES_99 - do you train your bounce messages? > > yes. Great, thanks.