On Mon, 04 Apr 2016 20:35:42 +0200 A. Schulze wrote: > RW: > > > On Mon, 4 Apr 2016 13:00:11 -0400 > > Alex wrote: > > > >> Hi, > >> > >> Can someone help me understand why this auto-away message failed > >> the DMARC tests? > >> > >> http://pastebin.com/wXhxex92 > >> > >> It looks like it passed through an AOL MX, yet SPF still failed. > > > > It didn't fail SPF, it failed to pass because there's no envelope > > sender address. > > DMARC think in alignments. Authentication for SPF or DKIM (or both) > must be aligned with RFC5322.From. > > SPF bind RFC5321.MailFrom to an Entiry. For any > DeliveryStatusNotification or Autoresonder the RFC5321.MailFrom is > required to be empty. So SPF *never* could be aligned to > RFC5322.From for such messages.
FWIW automated replies are allowed to have a null address, but it's not required. The important thing is that this one didn't. > The only way to generate a DMARC=pass is DKIM. A domainowner has to > DKIM-sign DeliveryStatusNotification or Autoresonder in alignement > to the RFC5322.From. I assume the OP knows why it didn't pass DKIM since he specifically mentioned SPF.
