I only have the mismatch problem with opendmarc-reports and thats using most of the command line options.
Normal email (port 587) is matched with spf,dkim and dmarc. Please do not consider our email servers as mentally retarded in regard to that. Hence my posting on a dmarc list. report emails per the dmarc spec is the last thing left that i struggled with. As to ATPS1 that is something i am unwilling to test out unless atps01 packs up sooner rather than later this week. On Wed, Feb 1, 2017 at 8:45 AM, Juri Haberland via dmarc-discuss < dmarc-discuss@dmarc.org> wrote: > SheridanJ West via dmarc-discuss wrote: > > i appear to need atps records for google this is with atps dns text > records > > and probably others > > > > opendmarc-reports: sent report for gmail.com to > mailauth-repo...@google.com > > (2.0.0 Ok: queued as x1) > > > > without atps [results i got from last week] > > > > postfix/smtp[5820]: > > x0: to=<mailauth-repo...@google.com>, > > relay=aspmx.l.google.com[74.125.71.26]:25, delay=1.1, > > delays=0.13/0.01/0.49/0.43, dsn=5.7.1, status=bounced > > (host aspmx.l.google.com[74.125.71.26] said: 550-5.7.1 > > Unauthenticated email from example.eu is not accepted > > due to 550-5.7.1 domain's DMARC policy. > > Please contact the administrator of 550-5.7.1 example.eu > > domain if this was a legitimate mail. > > Ok, so without ATPS Google won't take your mail. I suggest to check your > SPF > settings - if ATPS (or DKIM) fails, it should at least authenticate via > SPF. > > > I used (appears to work) dns records > > _adsp._domainkey.example.eu. "dkim=all atps=y; asl=example.com > ;" > > <sha1 of example.com>._atps.example.eu. "v=atps01; d=example.com;" > > not work (or tried yet) the content made by openmarc-atpszone > > v=ATPS1; d=example.net > > I don't know anything about ATPS, but I fail to see how OpenDMARC is the > culprit for your problems. You seem to have at least two problems: > - missing or wrong SPF RR for your sending host > - some ATPS/DKIM problem (looking at RFC6541 yields that v=ATPS1 is right > and > v=atps01 is wrong) > > Juri > > > _______________________________________________ > dmarc-discuss mailing list > dmarc-discuss@dmarc.org > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) >
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
