Menu

#240 Options DomainWhitelist not work (ARC-Authentication-Results header)

1.3.2
open
nobody
None
2021-02-09
2021-02-09
boss-chifra
No

Hello.
I have installed OpenDMARC Filter v1.4.0

I can not create proper configuration so that the emails that Google forwards to my server are not checked a second time. I want to trust google checks via ARC-Authentication-Results header

I add to my config this:

DomainWhitelist google.com
TrustedAuthservIDs mx.google.com

but it not work :-(
Please help

Feb  9 16:49:36 mail opendmarc[7744]: 04D186642 ignoring Authentication-Results at 16 from smtp35.i.mail.ru
Feb  9 16:49:36 mail opendmarc[7744]: 04D186642: SPF(mailfrom): xxxx@mail.ru fail
Feb  9 16:49:36 mail opendmarc[7744]: 04D186642: mail.ru fail
Feb  9 16:49:36 mail postfix/cleanup[8305]: 04D186642: milter-reject: END-OF-MESSAGE from mail-lf1-f69.google.com[209.85.167.69]: 5.7.1 rejected by DMARC policy for mail.ru; from=<xxxx@mail.ru> to=<yy@mail.zzzz.net> proto=ESMTP helo=<mail-lf1-f69.google.com>
ARC-Seal: i=2; a=rsa-sha256; t=1612890632; cv=pass;
        d=google.com; s=arc-20160816;
        b=wuYzp3zgeodqXyRxYYFhGOI+zBfBpZZZYCjnAmGP4WBxKFAqL8SdX8TL3hH8nzReLu
         LyUtyFM/c9XRmkhqsWID/UOC4Nr1aU6+UdmRVXuwJy79OfExnjuXmWQEy79adiHaK/RT
         /94wtBh/Smnw6h7adCWJ6/QxMFNEoiKLm40pXCUo7OoA25KDGbpvbhzhqAyYsjnEaL12
         QkriaavHzcND22+Yu7GOfPI3wa+LC6wJOHUQDGJam+O667uv7Di7+y1qLVrdykbYUrNf
         YIiDqrbNnEJQk6Ibw89VAeF88bP3XEwXiXd91VFKtj4f+spyLtM7WFonM7jjZj6B6T8W
         is0w==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=content-transfer-encoding:content-language:mime-version:user-agent
         :date:message-id:subject:from:to:dkim-signature;
        bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
        b=yeNpo/oTlH6+EmWyETVauI8NxeAebiyzWBwOw5gDvf6rRLgWbE9IbCzXkh6L7IMdKP
         02xSiZlN2WhRhkbb0oZ2U6FwjWlBP1QgSh1JnuWoGKWCuY9RzMyWIz6lZvs5jDk/qjuq
         KHb4/k3O37NvUtYAJ649/aNIAsxfvhAMTk7Dhk/A7bu3cn8lSkV0JN2epookZFk1hOs2
         DAq3hkJPXhV59m0KByDCUPxDuws/YSOubnrSxT+OsTwZs/40KQsmSSUC2go5j6kRn3k/
         QafC4CVXIMedxxpiGbfAwEvUUotDAPvpktrwcTnUfFQo+QezcfO/8q0llDvou5p1wwsc
         0cRw==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
       arc=pass (i=1 spf=pass spfdomain=mail.ru dkim=pass dkdomain=mail.ru dmarc=pass fromdomain=mail.ru);
       spf=softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) smtp.mailfrom=xxxx@mail.ru;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru
Return-Path: <xxxx@mail.ru>
Received: from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69])
        by mx.google.com with SMTPS id z5sor9487139ljz.64.2021.02.09.09.10.32
        for <>
        (Google Transport Security);
        Tue, 09 Feb 2021 09:10:32 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) client-ip=209.85.220.69;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
       arc=pass (i=1 spf=pass spfdomain=mail.ru dkim=pass dkdomain=mail.ru dmarc=pass fromdomain=mail.ru);
       spf=softfail (google.com: domain of transitioning xxxx@mail.ru does not designate 209.85.220.69 as permitted sender) smtp.mailfrom=xxxx@mail.ru;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru
Authentication-Results: smtp35.i.mail.ru; auth=pass smtp.auth=xxxx@mail.ru smtp.mailfrom=xxxx@mail.ru
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:dkim-signature:to:from:subject:message-id:date
         :user-agent:mime-version:content-language:content-transfer-encoding;
        bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
        b=aJR/6dczmWyuIE3Ujj1SYUM78JW45zb/81r0b/9zt5qnSutt2c2vIisDYPN5OQjmvg
         /M0qP8mNw4O74zwmgDYP5ZpRnRODhUXIke+nG5RfE9IeXY/4JaNRtx6osfwnigLNDsCT
         ouu2vV/o+PC5ujZ1Ly9mec9jRCATuqgeNiN5qfbPkgwfVhLoN87M5ZF3aa+2fHMf7z6S
         14apAaUDcHS9ReyLcPljp9/VmtysL7Z8m/9GE2UfyyucETVIMfEiWEZtBoh/ooMmN9xg
         9RGGw89/YyGO6+741BIfMUxIfU9C98DbiLn1COWnS0T8peccbLt0ndcno0NHg7sUdKe3
         J9wA==
X-Gm-Message-State: AOAM533QvmVyyc1AfyNRLHeXfhvU0EQ4tPNd4Fxe54k2EJsFwIYPE/tx
    DRy4PNOYCbWq3yp9mjmdzHnvcQ8Ygup7ITgRrLLa3vX2iIwPyj+LAGvejHkX6w2oI+scA7dgOww
    Dcv+dA50hupD7zSfd3yz0NmXMDxv7LBa3e3XKYCKfmLbN6kmk0KQhgGkuIBE3KSzs/SMmrf48Gv
    AkdSBe/ZoQmyZH38qES/EPem4=
X-Received: by 2002:a2e:8ed7:: with SMTP id e23mr5344847ljl.198.1612890632634;
        Tue, 09 Feb 2021 09:10:32 -0800 (PST)
X-Google-Smtp-Source: ABdhPJyRn3Dd342HcT/6twfjSuCUy1FJ9Y7auEr0wTu3c+4rfX8YdMDko6Pocy5bECEVKs3BOINs
X-Received: by 2002:a2e:8ed7:: with SMTP id e23mr5344794ljl.198.1612890631961;
        Tue, 09 Feb 2021 09:10:31 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1612890631; cv=none;
        d=google.com; s=arc-20160816;
        b=Xp6HfYFgcZPYyZlSEKQVfxZV03hQgNzHmOkG6MZz4Shvx/4eyqbpUxXKROg3chzAtZ
         DoDch6XfojCEuvjGvm20HBXDog8fcRzz+V2mJDmxsywFiqPcbDwbUDcsBblPfw3/21V+
         UFx3KBOirNubCp13Zfeqhcvkgwg0kjo64aLfMnj8aLxTtVw4kYuMKCo5kRXp/RLM2uQD
         psmI6T4XNA/NnHqCjdPzRMhs/Ft0H8FRvNEICYhPxz5oeDaeGBDmMOuWGIRrK5WGkl60
         bwTvthsOc/K5UNEfwMI7YnS8p04bcHFdT04p3fu3R4fxaaEyz7qFiKm0Btp+P5UmYYP/
         IZBw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=content-transfer-encoding:content-language:mime-version:user-agent
         :date:message-id:subject:from:to:dkim-signature;
        bh=304moEpESQG5Wv70TkqWz640aQ//KtLGY4nHAHnN/ys=;
        b=mmUim8ezfzyPCkJfGnfQPyFcqtxABZi1Yg1LEvQKDe4GR/9BaZL24AQVBMVKWNq0wI
         c/g1pN56ro/2amvQB98kZq0HDTiEIjonVrQiZYiEIqRb0vUIaQmm87waeEPGyd/yTNha
         m5EPf3Eh+7J0ZaOHjwmDRagMGlE/UJ6/LYJR1wR8qbACIhl/3X8rFRvCfAfTKJb1/+MG
         XaBCHpDXGvMprzOcu1LlmCnZ/95VoVCJBQ0pio4eEJefG7l0AQzydgqzjFL8+SJ7skyr
         l+GJAo1JTJc+wUk1jDSRr7hu5msUfz5DCq9anFLhZ9DU/+bEsv6R8+amnc2kVy6Q4ywv
         8XUA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@mail.ru header.s=mail3 header.b=RhItZIwL;
       spf=pass (google.com: domain of xxxx@mail.ru designates x.y.z.x as permitted sender) smtp.mailfrom=xxxx@mail.ru;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=mail.ru

Discussion


Log in to post a comment.

MongoDB Logo MongoDB