Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-10 Thread Roland Turner via dmarc-discuss
On 10/3/20 02:15, Ivan Kovachev via dmarc-discuss wrote: How can DMARC validation be turned off or disabled at Office 365 for the above scenario? Hopefully it is obvious that that is a question for Microsoft support, rather than for dmarc-discuss? On your broader question: it is not

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread John Levine via dmarc-discuss
In article you write: >Dumb question time. In that scenario, if mail is forwarded with the >DKIM signature intact, would that be good enough to still pass DMARC? >Or will it fail because SPF now fails? Assuming no gratuitous changes to the message, yes. But I've found a dismaying number of

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Al Iverson via dmarc-discuss
Thanks! And a valid point. :) Al On Mon, Mar 9, 2020 at 3:39 PM Kurt Andersen (DMARC) wrote: > > If the signature is not broken, then having DKIM pass is sufficient for a > DMARC pass (per the spec). Whether Exchange evaluates it correctly or not is > a different question :-) > > --Kurt > >

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Kurt Andersen (DMARC) via dmarc-discuss
If the signature is not broken, then having DKIM pass is sufficient for a DMARC pass (per the spec). Whether Exchange evaluates it correctly or not is a different question :-) --Kurt On Mon, Mar 9, 2020 at 1:33 PM Al Iverson via dmarc-discuss < dmarc-discuss@dmarc.org> wrote: > Dumb question

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Dave Crocker via dmarc-discuss
On 3/9/2020 1:29 PM, Al Iverson via dmarc-discuss wrote: Dumb question time. In that scenario, if mail is forwarded with the DKIM signature intact, would that be good enough to still pass DMARC? Or will it fail because SPF now fails? DMARC allows either SPF or DKIM success. as long as the

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Al Iverson via dmarc-discuss
Dumb question time. In that scenario, if mail is forwarded with the DKIM signature intact, would that be good enough to still pass DMARC? Or will it fail because SPF now fails? Al On Mon, Mar 9, 2020 at 2:25 PM Ivan Kovachev via dmarc-discuss wrote: > > If only I could push them. > > On Mon,

Re: [dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Ivan Kovachev via dmarc-discuss
If only I could push them. On Mon, Mar 9, 2020, 18:32 Kurt Andersen wrote: > This is not a topic for the DMARC protocol discussion list. You should > probably be directing the inquiry to your Exchange support channel - and > pushing Barracuda to implement ARC (RFC8617) too :-) > > Cheers, >

[dmarc-discuss] DMARC is not disabled automatically at Office 365 when the MX is different

2020-03-09 Thread Ivan Kovachev via dmarc-discuss
Hello, It looks like Office 365 with a gateway in front such as Barracuda or another gateway, still does DMARC validation inbound, and quarantines any emails that fail DMARC validation. Should this not be the case since the MX of the receiving domain is that of the Barracuda or whatever other