Hi Marc,
your idea is right in my opinion.
You do need a valid SPF (but may be a „-all“ thats your choice, because you
don’t send for that domain mails) record. But no DKIM, because you don’t send
emails.
But enough of talking, i think an example helps more:
Domain 1 (master)
_dmarc
Dear Juri,
thanks for your support! That was the answer I needed.
I think the generic list was the right to address - I have atm no problems with
OpenDMARC (which is surely running on my system).
It was about my failing reports and as I did not find any further information
about dmarctest.org
Dear all,
first of all: many thanks for all your hopefully provided help.
I am running a CentOS server, with configured Postfix / Dovecot setup.
I have a problem with Microsoft (dkim=temperror) and dmarctest.org (SPF
alignment fail). I think my Microsoft problem will need some time because of