The problem is the header that is appended by majordomo it seems according to this https://outofcontrol.ca/blog/patch-majordomo-to-work-with-dmarc
The postfix sender IP from my mail server is 116.203.154.189 which is verified correctly against DKIM and SPF Then majordomo forwards the mails to the list users with postfix sender IP 168.100.1.3, 168.100.1.4 or 168.100.1.7but applies the header from of my server, which of course does not validate anymore My mail <source_ip>116.203.154.189</source_ip> THIS IS MY SERVER IP, CORRECT <count>1</count> <policy_evaluated> <disposition>none</disposition> <dkim>pass</dkim> <spf>pass</spf> </policy_evaluated> </row> <identifiers> <header_from>prvtmail.net</header_from> </identifiers> <auth_results> <dkim> <domain>prvtmail.net</domain> <result>pass</result> <selector>def</selector> </dkim> <spf> <domain>prvtmail.net</domain> <result>pass</result> </spf> MAJORDOMO FORWARDED <source_ip>168.100.1.7</source_ip> ... MAJORDOMO IP <count>1</count> <policy_evaluated> <disposition>reject</disposition> <dkim>fail</dkim> <spf>fail</spf> </policy_evaluated> </row> <identifiers> <header_from>prvtmail.net</header_from> ... BUT MY HEADER </identifiers> <auth_results> <spf> <domain>postfix.org</domain> .... SPF FROM POSTFIX.ORG <result>none</result> </spf> <dkim> <domain>prvtmail.net</domain> ... DKIM failed of course <result>fail</result> </dkim> </auth_results> On 19/04/2019 13:36, Benny Pedersen wrote: > Wietse Venema skrev den 2019-04-19 13:05: >> Sign your email with DKIM. The Postfix list is DKIM-safe. > > is there a diff on postfix sender ips ? > > on 2604:8d00:0:1::7 i get DKIM_ADSP_ALL > on 168.100.1.3 i get DKIM_VALID_AU
