On Mon, 04 Apr 2016 20:35:42 +0200
A. Schulze wrote:

> RW:
> 
> > On Mon, 4 Apr 2016 13:00:11 -0400
> > Alex wrote:
> >  
> >> Hi,
> >>
> >> Can someone help me understand why this auto-away message failed
> >> the DMARC tests?
> >>
> >> http://pastebin.com/wXhxex92
> >>
> >> It looks like it passed through an AOL MX, yet SPF still failed.  
> >
> > It didn't fail SPF, it failed to pass because there's no envelope
> > sender address.  
> 
> DMARC think in alignments. Authentication for SPF or DKIM (or both)  
> must be aligned with RFC5322.From.
> 
> SPF bind RFC5321.MailFrom to an Entiry. For any  
> DeliveryStatusNotification or Autoresonder the RFC5321.MailFrom is  
> required to be empty. So SPF *never* could be aligned to
> RFC5322.From for such messages.


FWIW  automated replies are allowed to have a null address, but
it's not required. 

The important thing is that this one didn't.

> The only way to generate a DMARC=pass is DKIM. A domainowner has to  
> DKIM-sign DeliveryStatusNotification or Autoresonder in alignement
> to the RFC5322.From.

I assume the OP knows why it didn't pass DKIM since he specifically
mentioned SPF.

Reply via email to