I keep forgetting the most important clue to the whole thing. The domains that 
are failing the DKIM are 


google.com
AOL
Yahoo! Inc.

Which is why I thought it must be list-serv traffic.

Ben


> On Feb 17, 2016, at 2:05 AM, Roland Turner via dmarc-discuss 
> <dmarc-discuss@dmarc.org> wrote:
> 
> Ben Greenfield wrote:
> 
>> I believe the IP and hostname match exactly the ip address and hostname of 
>> the working DKIM, SPF. I was assuming that these were the emails that went 
>> to list-serves, but on further consideration if they were list-servs that 
>> would show the ip and hostname of the list-serv.
> 
> DKIM and IP addresses are almost orthogonal, so the sorts of matches that 
> you're talking about are not that important. Relevant questions would appear 
> to be:
> 
> - Which IP addresses are sending messages that are failing DKIM but passing 
> SPF[1]?
> - Are these IP addresses under your control?
> - If so, why is DKIM failing?
> - If not, why are they listed in your SPF record?
> 
> - Roland
> 
> 1: I assume that we're talking about SPF for your own domains, rather than 
> for a forwarder's?
> _______________________________________________
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)


_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to