Re: [dmarc-discuss] Multiple SPF results in report

2016-04-05 Thread Michiel van de Vis via dmarc-discuss
gt; Date: Monday, April 4, 2016 at 1:00 PM > To: Dave Lugo <dave_l...@cable.comcast.com> > Cc: DMARC Discussion List <dmarc-discuss@dmarc.org> > > Subject: Re: [dmarc-discuss] Multiple SPF results in report > > The question, is what is the RFC5321.mailfrom is empty? The &g

Re: [dmarc-discuss] Multiple SPF results in report

2016-04-04 Thread Franck Martin via dmarc-discuss
discuss@dmarc.org> > Reply-To: Franck Martin <fmar...@linkedin.com> > Date: Monday, April 4, 2016 at 11:51 AM > To: Maarten Oelering <maar...@postmastery.net> > Cc: "n...@graafhenk.nl" <n...@graafhenk.nl>, DMARC Discussion List < > dmarc-d

Re: [dmarc-discuss] Multiple SPF results in report

2016-04-04 Thread Lugo, Dave via dmarc-discuss
11:51 AM To: Maarten Oelering <maar...@postmastery.net<mailto:maar...@postmastery.net>> Cc: "n...@graafhenk.nl<mailto:n...@graafhenk.nl>" <n...@graafhenk.nl<mailto:n...@graafhenk.nl>>, DMARC Discussion List <dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>&

Re: [dmarc-discuss] Multiple SPF results in report

2016-04-04 Thread Franck Martin via dmarc-discuss
It is a bug. There can only be one SPF per record. Theoretically SPF returns 2 results, one for the RFC7208.HELO and another one for RFC7208.MAILFROM, but DMARC takes as input only RFC7208.MAILFROM, therefore only this results is needed in DMARC reports. RFC7208.MAILFROM is not RFC5321.MailFrom,

Re: [dmarc-discuss] Multiple SPF results in report

2016-04-04 Thread Maarten Oelering via dmarc-discuss
Do you mean that in the XML you see 6 elements in one element? Or do you mean you see 6 different domains in the your reports? Maarten Oelering Postmastery > On 4 apr. 2016, at 09:05, Nick via dmarc-discuss > wrote: > > I received a DMARC report with multiple SPF

[dmarc-discuss] Multiple SPF results in report

2016-04-04 Thread Nick via dmarc-discuss
I received a DMARC report with multiple SPF results. I wonder how this is possible as I only have one SPF record for my domain defined. In one report I got 6 SPF results. The only thing I could think of is some automatic forwarding service changing the return path header. Are there more