Aggregate reports

[Jakob Overgaard]

Hi

Is it possible to enable DKIM/DMARC aggregate reporting to rua/rufs with
ScrolloutF1? I haven't seen this option but I'd like to generate reports
(RFC6651?) to sender domains somehow.

Thanks

[Kevin O'Connor]

The option to configure it is under ROUTE -> OUTGOING

Be very careful with DMARC or you could end up getting your mail rejected by the likes of Google or Microsoft. Start by setting p=none then work your way up to reject. For DKIM I'd only sign the headders and not the whole mail. Once you have it setup you will still need a piece of software installed somewhere to actually make sense of the reports. There are lots of Open Source options out there.

[Jakob Overgaard]

Thank you for your reply. I've already set up DMARC and worked my way up to reject. Some domains send out the following report for my domains, and I'm looking for an option to send out the same reports -- if possible with scrollout:

<?xml version="1.0" encoding="UTF-8"?>
-<feedback>
-<report_metadata>
<org_name>google.com</org_name>
<email>noreply-dmarc-support@google.com</email>
<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
<report_id>304015227098346944</report_id>
-<date_range>
<begin>1540512000</begin>
<end>1540598399</end>
</date_range>
</report_metadata>
-<policy_published>
<domain><removed></domain>
<adkim>s</adkim>
<aspf>s</aspf>
<p>reject</p>
<sp>reject</sp>
<pct>100</pct>
</policy_published>
-<record>
-<row>
<source_ip><removed></source_ip>
<count>28</count>
-<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
-<identifiers>
<header_from><removed></header_from>
</identifiers>
-<auth_results>
-<dkim>
<domain><removed></domain>
<result>pass</result>
<selector>dkim</selector>
</dkim>
-<spf>
<domain><removed></domain>
<result>pass</result>
</spf>
</auth_results>
</record>
</feedback>

[Kevin O'Connor]

Install OpenDMARC for Postfix. For a decent setup guide follow Steve Jenkins how to.
https://www.stevejenkins.com/blog/2015/03/installing-opendmarc-rpm-via-yum-with-postfix-or-sendmail-for-rhel-centos-fedora/

[Jakob Overgaard]

Thank you for the suggestion. That's exactly what I've been looking for.