#136 dmarc=fail for noreply@insideicloud.icloud.com via acm.org

[Ruga]

Hello,

The problem:

Authentication-Results: localhost; spf=pass
smtp.mailfrom=SRS0+d782b39ec87ab429=JY=insideicloud.icloud.com=bounces@srs.acm.org;
sender-id=softfail header.From=noreply@insideicloud.icloud.com; dkim=pass
header.i=@insideicloud.icloud.com; dkim-adsp=pass
header.From=noreply@insideicloud.icloud.com
Authentication-Results: localhost; dmarc=fail header.from=insideicloud.icloud.com

One expects dmarc=pass instead.

The local opendmarc is configured as follows:

BaseDirectory /var/empty
UserID [...]
DNSTimeout 5
Socket unix:/var/spool/postfix/private/opendmarc.socket
PidFile /var/run/dmarc.pid
Background false
AutoRestart true
AutoRestartCount 3
AutoRestartRate 10/1h
IgnoreAuthenticatedClients true
RecordAllMessages false
RequiredHeaders false
SPFIgnoreResults false
SPFSelfValidate false
SoftwareHeader false
RejectFailures false
AuthservID [...]
AuthservIDWithJobID false
TrustedAuthservIDs [...], [...]
ReportCommand /sbin/sendmail -t
FailureReportsSentBy noreply-dmarc-support@[...]
Syslog true
SyslogFacility local1
MilterDebug 1

The opendmarc milter is called as follows:

[...]
dmarc_milter=unix:private/opendmarc.socket
smtpd_milters=${spf_milter},${dkim_milter},${dmarc_milter}
[...]

Thank you for your time.

[A. Schulze]

hi,

• which $spf_milter / $dkim_milter generate the A-H header shown above.
  I ask because two separate milter combine both authentication resultes in one A-R header ?

• could you also show the RFC5233.From ?

Andreas

[A. Schulze]

Authentication-Results: localhost;
spf=pass smtp.mailfrom=SRS0+d782b39ec87ab429=JY=insideicloud.icloud.com=bounces@srs.acm.org;
dkim=pass header.i=@insideicloud.icloud.com

• spf=pass is not aligned
• dkim=pass does not contain a header.d=