Re: [dmarc-discuss] RUF reports
A local_policy override is a discretionary choice by the receiver; it's not clear what choice is being made or why. Failure reports are sent at the discretion of the receiver, and then only when they determine a failure, which in this case has not occurred for receiver-local reasons. - Roland From: dmarc-discuss <dmarc-discuss-boun...@dmarc.org> on behalf of Jim Popovitch via dmarc-discuss <dmarc-discuss@dmarc.org> Sent: Friday, 6 January 2017 09:32 To: dmarc-discuss@dmarc.org Subject: [dmarc-discuss] RUF reports Hello, I've been trying, albeit slowly, to determine why I haven't seen any RUF reports since Sept 2016. Shouldn't this RUA report also produce a corresponding RUF? http://domainmail.org/dmarc-reports/126.com%21inug.org%211483574400%211483660799.xml -Jim P. ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html) ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
Re: [dmarc-discuss] RUF reports
On Thu, Jan 5, 2017 at 10:05 PM, Steven M Joneswrote: > On 01/05/2017 17:32, Jim Popovitch via dmarc-discuss wrote: >> I've been trying, albeit slowly, to determine why I haven't seen any >> RUF reports since Sept 2016. >> >> Shouldn't this RUA report also produce a corresponding RUF? > > Are you DKIM signing these messages? No. The msg is presumably spam sent by 171.40.246.96 (an IP I don't have any access to) using a domain that I hold (and it's a domain that never sends any email) Google caught similar attempts from 159.253.38.11 using that same domain. http://domainmail.org/dmarc-reports/google.com%21inug.org%211483401600%211483487999.xml > Because I notice the reason given > for the local policy override includes "Ignore dkim/spf DNS query" and > there's no DKIM section in - making me wonder if they had > a problem accessing your selector, and that the comment above really > means "our DNS query for a DKIM record received no response." > > Plausible? I don't see enough information to rule it out... Interesting, but they won't find a selector for that domain on my DNS systems as its not used for email. -Jim P. ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
Re: [dmarc-discuss] RUF reports
On 01/05/2017 17:32, Jim Popovitch via dmarc-discuss wrote: > I've been trying, albeit slowly, to determine why I haven't seen any > RUF reports since Sept 2016. > > Shouldn't this RUA report also produce a corresponding RUF? Are you DKIM signing these messages? Because I notice the reason given for the local policy override includes "Ignore dkim/spf DNS query" and there's no DKIM section in - making me wonder if they had a problem accessing your selector, and that the comment above really means "our DNS query for a DKIM record received no response." Plausible? I don't see enough information to rule it out... --S. -- Steven M Jones CRASH Computing ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
[dmarc-discuss] RUF reports
Hello, I've been trying, albeit slowly, to determine why I haven't seen any RUF reports since Sept 2016. Shouldn't this RUA report also produce a corresponding RUF? http://domainmail.org/dmarc-reports/126.com%21inug.org%211483574400%211483660799.xml -Jim P. ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)