I keep forgetting the most important clue to the whole thing. The domains that are failing the DKIM are
google.com AOL Yahoo! Inc. Which is why I thought it must be list-serv traffic. Ben > On Feb 17, 2016, at 2:05 AM, Roland Turner via dmarc-discuss > <dmarc-discuss@dmarc.org> wrote: > > Ben Greenfield wrote: > >> I believe the IP and hostname match exactly the ip address and hostname of >> the working DKIM, SPF. I was assuming that these were the emails that went >> to list-serves, but on further consideration if they were list-servs that >> would show the ip and hostname of the list-serv. > > DKIM and IP addresses are almost orthogonal, so the sorts of matches that > you're talking about are not that important. Relevant questions would appear > to be: > > - Which IP addresses are sending messages that are failing DKIM but passing > SPF[1]? > - Are these IP addresses under your control? > - If so, why is DKIM failing? > - If not, why are they listed in your SPF record? > > - Roland > > 1: I assume that we're talking about SPF for your own domains, rather than > for a forwarder's? > _______________________________________________ > dmarc-discuss mailing list > dmarc-discuss@dmarc.org > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well terms > (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
