Hello.
I have installed OpenDMARC Filter v1.4.0
I can not create proper configuration so that the emails that Google forwards to my server are not checked a second time. I want to trust google checks via ARC-Authentication-Results header
I add to my config this:
DomainWhitelist google.com
TrustedAuthservIDs mx.google.com
but it not work :-(
Please help
Feb 9 16:49:36 mail opendmarc[7744]: 04D186642 ignoring Authentication-Results at 16 from smtp35.i.mail.ru
Feb 9 16:49:36 mail opendmarc[7744]: 04D186642: SPF(mailfrom): xxxx@mail.ru fail
Feb 9 16:49:36 mail opendmarc[7744]: 04D186642: mail.ru fail
Feb 9 16:49:36 mail postfix/cleanup[8305]: 04D186642: milter-reject: END-OF-MESSAGE from mail-lf1-f69.google.com[209.85.167.69]: 5.7.1 rejected by DMARC policy for mail.ru; from=<xxxx@mail.ru> to=<yy@mail.zzzz.net> proto=ESMTP helo=<mail-lf1-f69.google.com>
ARC-Seal: i=2; a=rsa-sha256; t=1612890632; cv=pass;
d=google.com; s=arc-20160816;
b=wuYzp3zgeodqXyRxYYFhGOI+zBfBpZZZYCjnAmGP4WBxKFAqL8SdX8TL3hH8nzReLu
LyUtyFM/c9XRmkhqsWID/UOC4Nr1aU6+UdmRVXuwJy79OfExnjuXmWQEy79adiHaK/RT
/94wtBh/Smnw6h7adCWJ6/QxMFNEoiKLm40pXCUo7OoA25KDGbpvbhzhqAyYsjnEaL12
QkriaavHzcND22+Yu7GOfPI3wa+LC6wJOHUQDGJam+O667uv7Di7+y1qLVrdykbYUrNf
YIiDqrbNnEJQk6Ibw89VAeF88bP3XEwXiXd91VFKtj4f+spyLtM7WFonM7jjZj6B6T8W
is0w==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:content-language:mime-version:user-agent
:date:message-id:subject:from:to:dkim-signature;
bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
b=yeNpo/oTlH6+EmWyETVauI8NxeAebiyzWBwOw5gDvf6rRLgWbE9IbCzXkh6L7IMdKP
02xSiZlN2WhRhkbb0oZ2U6FwjWlBP1QgSh1JnuWoGKWCuY9RzMyWIz6lZvs5jDk/qjuq
KHb4/k3O37NvUtYAJ649/aNIAsxfvhAMTk7Dhk/A7bu3cn8lSkV0JN2epookZFk1hOs2
DAq3hkJPXhV59m0KByDCUPxDuws/YSOubnrSxT+OsTwZs/40KQsmSSUC2go5j6kRn3k/
QafC4CVXIMedxxpiGbfAwEvUUotDAPvpktrwcTnUfFQo+QezcfO/8q0llDvou5p1wwsc
0cRw==
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
arc=pass (i=1 spf=pass spfdomain=mail.ru dkim=pass dkdomain=mail.ru dmarc=pass fromdomain=mail.ru);
spf=softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) smtp.mailfrom=xxxx@mail.ru;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru
Return-Path: <xxxx@mail.ru>
Received: from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69])
by mx.google.com with SMTPS id z5sor9487139ljz.64.2021.02.09.09.10.32
for <>
(Google Transport Security);
Tue, 09 Feb 2021 09:10:32 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) client-ip=209.85.220.69;
Authentication-Results: mx.google.com;
dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
arc=pass (i=1 spf=pass spfdomain=mail.ru dkim=pass dkdomain=mail.ru dmarc=pass fromdomain=mail.ru);
spf=softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) smtp.mailfrom=xxxx@mail.ru;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru
Authentication-Results: smtp35.i.mail.ru; auth=pass smtp.auth=xxxx@mail.ru smtp.mailfrom=xxxx@mail.ru
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:dkim-signature:to:from:subject:message-id:date
:user-agent:mime-version:content-language:content-transfer-encoding;
bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
b=aJR/6dczmWyuIE3Ujj1SYUM78JW45zb/81r0b/9zt5qnSutt2c2vIisDYPN5OQjmvg
/M0qP8mNw4O74zwmgDYP5ZpRnRODhUXIke+nG5RfE9IeXY/4JaNRtx6osfwnigLNDsCT
ouu2vV/o+PC5ujZ1Ly9mec9jRCATuqgeNiN5qfbPkgwfVhLoN87M5ZF3aa+2fHMf7z6S
14apAaUDcHS9ReyLcPljp9/VmtysL7Z8m/9GE2UfyyucETVIMfEiWEZtBoh/ooMmN9xg
9RGGw89/YyGO6+741BIfMUxIfU9C98DbiLn1COWnS0T8peccbLt0ndcno0NHg7sUdKe3
J9wA==
X-Gm-Message-State: AOAM533QvmVyyc1AfyNRLHeXfhvU0EQ4tPNd4Fxe54k2EJsFwIYPE/tx
DRy4PNOYCbWq3yp9mjmdzHnvcQ8Ygup7ITgRrLLa3vX2iIwPyj+LAGvejHkX6w2oI+scA7dgOww
Dcv+dA50hupD7zSfd3yz0NmXMDxv7LBa3e3XKYCKfmLbN6kmk0KQhgGkuIBE3KSzs/SMmrf48Gv
AkdSBe/ZoQmyZH38qES/EPem4=
X-Received: by 2002:a2e:8ed7:: with SMTP id e23mr5344847ljl.198.1612890632634;
Tue, 09 Feb 2021 09:10:32 -0800 (PST)
X-Google-Smtp-Source: ABdhPJyRn3Dd342HcT/6twfjSuCUy1FJ9Y7auEr0wTu3c+4rfX8YdMDko6Pocy5bECEVKs3BOINs
X-Received: by 2002:a2e:8ed7:: with SMTP id e23mr5344794ljl.198.1612890631961;
Tue, 09 Feb 2021 09:10:31 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1612890631; cv=none;
d=google.com; s=arc-20160816;
b=Xp6HfYFgcZPYyZlSEKQVfxZV03hQgNzHmOkG6MZz4Shvx/4eyqbpUxXKROg3chzAtZ
DoDch6XfojCEuvjGvm20HBXDog8fcRzz+V2mJDmxsywFiqPcbDwbUDcsBblPfw3/21V+
UFx3KBOirNubCp13Zfeqhcvkgwg0kjo64aLfMnj8aLxTtVw4kYuMKCo5kRXp/RLM2uQD
psmI6T4XNA/NnHqCjdPzRMhs/Ft0H8FRvNEICYhPxz5oeDaeGBDmMOuWGIRrK5WGkl60
bwTvthsOc/K5UNEfwMI7YnS8p04bcHFdT04p3fu3R4fxaaEyz7qFiKm0Btp+P5UmYYP/
IZBw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:content-language:mime-version:user-agent
:date:message-id:subject:from:to:dkim-signature;
bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
b=mmUim8ezfzyPCkJfGnfQPyFcqtxABZi1Yg1LEvQKDe4GR/9BaZL24AQVBMVKWNq0wI
c/g1pN56ro/2amvQB98kZq0HDTiEIjonVrQiZYiEIqRb0vUIaQmm87waeEPGyd/yTNha
m5EPf3Eh+7J0ZaOHjwmDRagMGlE/UJ6/LYJR1wR8qbACIhl/3X8rFRvCfAfTKJb1/+MG
XaBCHpDXGvMprzOcu1LlmCnZ/95VoVCJBQ0pio4eEJefG7l0AQzydgqzjFL8+SJ7skyr
l+GJAo1JTJc+wUk1jDSRr7hu5msUfz5DCq9anFLhZ9DU/+bEsv6R8+amnc2kVy6Q4ywv
8XUA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
spf=pass (google.com: domain of xxxx@mail.ru designates x.y.z.x as permitted sender) smtp.mailfrom=xxxx@mail.ru;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru