Re: [mailop] Reliability of DMARC reports?

2021-03-15 Thread Hans-Martin Mosner via mailop
Thanks all for the encouraging answers, folks! I've weakened our policy for now to "none" to squash the problems that still exist especially in the area of forwarding and mailman3 lists. But I'm confident now that we will be able to both generate DMARC-validatable mails and make use of DMARC rep

Re: [mailop] Reliability of DMARC reports?

2021-03-15 Thread Alessandro Vesely via mailop
Hi Hans-Martin, On Sun 14/Mar/2021 08:43:09 +0100 Hans-Martin Mosner via mailop wrote: Since this is a completely new area for me, I'm trying to make sense of the report content, and of course I'm trying to adjust our DNS records to limit damage. I find it very useful to transform reports i

Re: [mailop] Reliability of DMARC reports?

2021-03-14 Thread Maarten Oelering via mailop
The reports can be very helpful. But they are not that intuitive. Make sure you understand the the following. The results of SPF and DKIM sec (without considering alignment) are given in /. The results of SPF and DKIM in DMARC context (with alignment considered) are in /. SPF breaks with forw

Re: [mailop] Reliability of DMARC reports?

2021-03-14 Thread Ken O'Driscoll via mailop
> -Original Message- > From: mailop On Behalf Of Hans-Martin Mosner > via mailop > Sent: Sunday 14 March 2021 07:43 > To: mailop > Subject: [mailop] Reliability of DMARC reports? > > Hello, > > due to the recent GMX mail rejection incident (for which I sti

Re: [mailop] Reliability of DMARC reports?

2021-03-14 Thread Simon Arlott via mailop
On 14/03/2021 07:43, Hans-Martin Mosner via mailop wrote: > The report also claims that SPF failed, although our SPF record included the > outgoing mailserver from the beginning, of > course. Did it fail for your IP or another IP? > So this report looks like a red herring to me - not enough info

[mailop] Reliability of DMARC reports?

2021-03-13 Thread Hans-Martin Mosner via mailop
Hello, due to the recent GMX mail rejection incident (for which I still don't have a satisfactory explanation from GMX) I've enabled DMARC on our mail server in the hopes of getting better deliverability. But some of our outgoing mails were rejected, and the aggregate DMARC reports we were gett