There is also a rule update for priority levels. Did you install the latest rules too?
R On Sun, May 29, 2022, 12:41 Alex <mysqlstud...@gmail.com> wrote: > Hi, > > We have been DMARC issues so no, it is not you Are you running the latest >> trunk right now? There have been a flurry of patches and some of them are >> for this issue. >> > > Yes, just downloaded, compiled, and installed the latest as of this moment > and still seeing the same problems initially. This is from realtor.com, > sent through cons.6...@envfrm.rsys2.com. > > X-Spam-Status: No, score=-2.383 tagged_above=-200 required=5 > tests=[BAYES_00=-1.9, DCC_REPUT_00_12=-0.4, DKIM_SIGNED=0.1, > DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DMARC_REJECT=0.1, > FROM_EXCESS_BASE64=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, > HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, KAM_DMARC_REJECT=1, > KAM_REALLYHUGEIMGSRC=0.5, LOC_MKTING=0.25, MIME_HTML_ONLY=0.1, > POISEN_SPAM_PILL=0.1, POISEN_SPAM_PILL_1=0.1, > RCVD_IN_HOSTKARMA_W=-2.5, RCVD_IN_SENDERSCORE_90_100=-0.6, > RELAYCOUNTRY_US=0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, > TXREP=0.714, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=disabled > > However, when I run it through SA after it's received, it doesn't hit > KAM_DMARC_REJECT or DMARC_REJECT. In fact, it hits DMARC_PASS. It > also continues to hit DKIM_VALID_AU. I don't know how to explain that. > > I've changed the rule scores a bit, but have otherwise made no changes. > Perhaps when I ran it manually the timing of the checks were different? > > I think we are having inconsistencies as well right now where the >> authentication header or lack thereof results in failing SPF in my >> environment soin my environment we are using other parts of the glue for a >> solution. >> >> When you look at the FPs for DMARC, are you seeing SPF failures or >> anything that you can track? >> > > These also typically pass SPF, which is why I suppose my welcomelist_auth > rules continue to work. > > >
