Re: Amavis and OpenDMARC
Matus UHLAR - fantomas <[email protected]> Sat, 2 Dec 2023 15:54:45 +0100
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <[email protected]> |
>>On 21.11.23 12:06, Noel Butler wrote: >>But they are inter-twined, >>DMARC just does what DKIM and SPF declare, so any perceived DMARC >>issues *do* include DKIM and SPF >On 28/11/2023 19:45, Matus UHLAR - fantomas wrote: >but this is irelevant here. On 02.12.23 13:25, Noel Butler wrote: >We will have to agree to disagree okay... >>Not "a pass and a failure". A DKIM pass and SPF pass. >> >>But when the SPF is not aligned, DMARC wording requires sending >>report for "fo=1", because of RFC something other than an >>aligned "pass" result. >I think this thread is coming to an end as we seem to be going round >in circle ...all the time I'm trying to find out whether my claim is valid or not. Unfortunately, they're different claims brought instead all the time. > SPF _alignment_ is governed by your DMARC policy DMARC doesn't say that SPF must be aligned with From:. It only says that SPF can only be used if envelope from is aligned with header From:. >if you >use _relaxed_ only _one_ need pass so why if you use _relaxed_ would >you expect it to mail you if they dont match, if you want full >alignment I guess trying _simple_ :) Incorrect. "relaxed" in DMARC allows subdomains matching, "strict" does not. Neither is related to different domain in envelope vs. headers. And neither says if both SPF and DKIM must match. >>So, generally do you recommend us not to follow RFC and risk >>possible issues that are currently unseen? >>I prefer fixing the RFC instead. > >I think the RFC overall is fine maybe some wording could be changed >but its really cosmetic, and Scott K posted what to do if you think it >needs changing, but for that you will need an abundance of evidence to >support any changes I think. -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease