Logout

Alt-N Discussion Groups > Discussions > dmarc rejected email problem

 [F] Alt-N Discussion Groups  / Discussions  /

dmarc rejected email problem

[Comandi, Marco]
Marco Comandi
Newbie
Newbie
Posts: 2
Marco Comandi - 06:06am, Mar 11 2019

Hi all

I have a problem with a sender failing DMARC auth. It's failing because DMARC cannot validate neither SPF nor DKIM.
But the sender domain does actually have a SPF record. The sender is gest.si-cloud.it (for whom there's no SPF) on behalf of wildix.com (here I have the SPF).

I will post the transcript of the SMTP session:
thanks

Mon 2019-03-11 09:45:43.824: 02: (-- EHLO gest.si-cloud.it
//
Mon 2019-03-11 09:45:43.875: 02: (-- MAIL FROM:(---@wildix.com) SIZE=684
//
Mon 2019-03-11 09:45:43.938: 05: Performing IP lookup (wildix.com)
Mon 2019-03-11 09:45:43.963: 05: * D=wildix.com TTL=(9) A=[34.247.0.122]
Mon 2019-03-11 09:45:44.272: 05: * P=001 S=000 D=wildix.com TTL=(8) MX=[aspmx.l.google.com] {173.194.76.26}
Mon 2019-03-11 09:45:44.272: 05: * P=005 S=003 D=wildix.com TTL=(8) MX=[alt1.aspmx.l.google.com] {74.125.131.26}
Mon 2019-03-11 09:45:44.272: 05: * P=005 S=004 D=wildix.com TTL=(8) MX=[alt2.aspmx.l.google.com] {74.125.68.26}
Mon 2019-03-11 09:45:44.272: 05: * P=010 S=001 D=wildix.com TTL=(8) MX=[alt3.aspmx.l.google.com] {64.233.188.26}
Mon 2019-03-11 09:45:44.272: 05: * P=010 S=002 D=wildix.com TTL=(8) MX=[alt4.aspmx.l.google.com] {74.125.195.26}
Mon 2019-03-11 09:45:44.272: 05: ---- End IP lookup results
Mon 2019-03-11 09:45:44.286: 09: Performing SPF lookup (gest.si-cloud.it / 185.60.140.23)
Mon 2019-03-11 09:45:44.321: 09: * Result: none, no SPF record in DNS
Mon 2019-03-11 09:45:44.321: 09: ---- End SPF results

Here it's performing SPF check against wildix.com, it should return a valid list of domains and includes, I tested it myself on mxtoolbox.
----
Mon 2019-03-11 09:45:44.324: 09: Performing SPF lookup (wildix.com / 185.60.140.23)
Mon 2019-03-11 09:45:44.368: 09: * Result: none, no SPF record in DNS -----------Wrong, there is a SPF record tor this domain!
----

Mon 2019-03-11 09:45:44.368: 09: ---- End SPF results
Mon 2019-03-11 09:45:44.368: 03: --) 250 2.1.0 Sender OK
//
Mon 2019-03-11 09:45:44.891: 10: Performing DKIM lookup
//
Mon 2019-03-11 09:45:44.892: 10: * Result: neutral
//
Mon 2019-03-11 09:45:44.897: 19: * Message-ID: (18e5c42d49de478@---)
Mon 2019-03-11 09:45:44.897: 19: * Author domain: wildix.com
Mon 2019-03-11 09:45:44.897: 19: * Organizational domain: wildix.com
Mon 2019-03-11 09:45:44.897: 19: * Query domain: _dmarc.wildix.com
Mon 2019-03-11 09:45:44.942: 19: * Policy record: v=DMARC1, p=reject, sp=none, rua=mailto:monitoring@wildix.com, ruf=mailto:monitoring@wildix.com, fo=1,
Mon 2019-03-11 09:45:44.950: 19: * Checking authentication mechanisms for DMARC alignment
Mon 2019-03-11 09:45:44.950: 19: * SPF: no SPF policy found
Mon 2019-03-11 09:45:44.950: 19: * DKIM: no DKIM signatures found
Mon 2019-03-11 09:45:44.951: 19: * Action taken: reject
Mon 2019-03-11 09:45:44.951: 19: * Result: fail
Mon 2019-03-11 09:45:44.951: 19: ---- End DMARC results

  (older msg: 2)All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items

Arron.Caruth@mdaemon.com - Mar 11, 2019 7:38 am (#3 Total: 7)  

Guest User  

Photo of Author
Posts: 1

What version of MDaemon are you using? 


--
Arron Caruth
Director of Product Development
o: 817-601-3222    e: arron.caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server

 

From: discuss@mdaemon.com [mailto:discuss@mdaemon.com] On Behalf Of Marco Comandi (lists-discuss@mdaemon.com)
Sent: Monday, March 11, 2019 6:06 AM
To: discuss List Member <discuss@mdaemon.com>
Subject: [discuss] dmarc rejected email problem

 

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


Hi all

I have a problem with a sender failing DMARC auth. It's failing because DMARC cannot validate neither SPF nor DKIM.
But the sender domain does actually have a SPF record. The sender is gest.si-cloud.it (for whom there's no SPF) on behalf of wildix.com (here I have the SPF).

I will post the transcript of the SMTP session:
thanks

Mon 2019-03-11 09:45:43.824: 02: (-- EHLO gest.si-cloud.it
//
Mon 2019-03-11 09:45:43.875: 02: (-- MAIL FROM:(---@wildix.com) SIZE=684
//
Mon 2019-03-11 09:45:43.938: 05: Performing IP lookup (wildix.com)
Mon 2019-03-11 09:45:43.963: 05: * D=wildix.com TTL=(9) A=[34.247.0.122]
Mon 2019-03-11 09:45:44.272: 05: * P=001 S=000 D=wildix.com TTL=(8) MX=[aspmx.l.google.com] {173.194.76.26}
Mon 2019-03-11 09:45:44.272: 05: * P=005 S=003 D=wildix.com TTL=(8) MX=[alt1.aspmx.l.google.com] {74.125.131.26}
Mon 2019-03-11 09:45:44.272: 05: * P=005 S=004 D=wildix.com TTL=(8) MX=[alt2.aspmx.l.google.com] {74.125.68.26}
Mon 2019-03-11 09:45:44.272: 05: * P=010 S=001 D=wildix.com TTL=(8) MX=[alt3.aspmx.l.google.com] {64.233.188.26}
Mon 2019-03-11 09:45:44.272: 05: * P=010 S=002 D=wildix.com TTL=(8) MX=[alt4.aspmx.l.google.com] {74.125.195.26}
Mon 2019-03-11 09:45:44.272: 05: ---- End IP lookup results
Mon 2019-03-11 09:45:44.286: 09: Performing SPF lookup (gest.si-cloud.it / 185.60.140.23)
Mon 2019-03-11 09:45:44.321: 09: * Result: none, no SPF record in DNS
Mon 2019-03-11 09:45:44.321: 09: ---- End SPF results
(u)(b)Mon 2019-03-11 09:45:44.324: 09: Performing SPF lookup (wildix.com / 185.60.140.23)
Mon 2019-03-11 09:45:44.368: 09: * Result: none, no SPF record in DNS(/b)(/u)
Mon 2019-03-11 09:45:44.368: 09: ---- End SPF results
Mon 2019-03-11 09:45:44.368: 03: --) 250 2.1.0 Sender OK
//
Mon 2019-03-11 09:45:44.891: 10: Performing DKIM lookup
//
Mon 2019-03-11 09:45:44.892: 10: * Result: neutral
//
Mon 2019-03-11 09:45:44.897: 19: * Message-ID: (18e5c42d49de478@---)
Mon 2019-03-11 09:45:44.897: 19: * Author domain: wildix.com
Mon 2019-03-11 09:45:44.897: 19: * Organizational domain: wildix.com
Mon 2019-03-11 09:45:44.897: 19: * Query domain: _dmarc.wildix.com
Mon 2019-03-11 09:45:44.942: 19: * Policy record: v=DMARC1, p=reject, sp=none, rua=mailto:monitoring@wildix.com, ruf=mailto:monitoring@wildix.com, fo=1,
Mon 2019-03-11 09:45:44.950: 19: * Checking authentication mechanisms for DMARC alignment
(b)Mon 2019-03-11 09:45:44.950: 19: * SPF: no SPF policy found(/b)
Mon 2019-03-11 09:45:44.950: 19: * DKIM: no DKIM signatures found
Mon 2019-03-11 09:45:44.951: 19: * Action taken: reject
(b)Mon 2019-03-11 09:45:44.951: 19: * Result: fail
Mon 2019-03-11 09:45:44.951: 19: ---- End DMARC results(/b)


View/reply at dmarc rejected email problem

 
 
--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------
 
 
-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------

--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------


-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------



  (newer msg:4)All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items



 Content:

Read New | Search

 Guest:

Email to Admin



You are visiting as a Guest user.