[CentOS] OT: DMARC / DKIM Failure Reports

On 2019-09-17 09:06, Miroslav Geisselreiter wrote:
> Hi guys,
> 
> when I send e-mails to CentOS mailing list <centos at centos.org>, I 
> received DMARC / DKIM failure reports. Is it possible to solve this 
> problem and if so how?
> 

That is why DMARC took 10 years of heated discussions, before it was 
actually implemented - in first place by big boys who will never 
hear/listen. DMARC breaks mail forwarding. Period. Breaks normal way 
mail lists were operating, but mail lists found work around:

I maintain mail lists for the department, mailman is mail list server we 
use. There is setting: Replace the From: if set to "Munge from" then 
mail list will replace sender with mail list itself and it will appear 
as send by ... through mail list. DMARC enforcing folks/servers will be 
happy.

Just my $0.02

Valeri

> This is the first report:
> 
> 
> This is an email abuse report for an email message received from IP 
> 208.100.23.70 on Tue, 17 Sep 2019 15:56:25 +0200.
> The message below did not meet the sending domain's DMARC policy.
> For more information about this format please 
> seehttp://tools.ietf.org/html/rfc6591  .
> 
> Feedback-Type: auth-failure
> User-Agent: Lua/1.0
> Version: 1.0
> Original-Mail-From:centos-bounces at centos.org
> Original-Rcpt-To:obodor at vub.sk
> Arrival-Date: Tue, 17 Sep 2019 15:56:25 +0200
> Message-ID:<5502e8ac-6b01-18dd-e028-7d2dd666063b at intar.cz>
> Authentication-Results: dmarc=fail (p=none, dis=none) header.from=intar.cz
> Source-IP: 208.100.23.70
> Delivery-Result: smg-policy-action
> Auth-Failure: dmarc
> Reported-Domain: intar.cz
> 
> ------------
> This is the seconf report:
> 
> This is an authentication failure report for an email message received 
> from IP
> 208.100.23.70 on Tue, 17 Sep 2019 15:56:32 +0200 (CEST).
> 
> 
> 
> Feedback-Type: auth-failure
> Version: 1
> User-Agent: OpenDMARC-Filter/1.3.2
> Auth-Failure: dmarc
> Authentication-Results: mx.bitactive.com; dmarc=fail header.from=intar.cz
> Original-Envelope-Id: 46Xl5X0Ss6z1ltXM
> Original-Mail-From:centos-bounces at centos.org
> Source-IP: 208.100.23.70 (mail.centos.org)
> Reported-Domain: intar.cz
> 
> 
> 
> Authentication-Results: mx.bitactive.com;
>      dkim=fail reason="signature verification failed" (1024-bit key) 
> header.d=intar.czheader.i=@intar.cz  header.b="rSnG4eyi"
> Received: from mail.centos.org (mail.centos.org [208.100.23.70])
>      (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
>      (No client certificate requested)
>      by mx.bitactive.com (Postfix) with ESMTPS id 46Xl5X0Ss6z1ltXM
>      for<mwanat at forall.pl>; Tue, 17 Sep 2019 15:56:32 +0200 (CEST)
> Received: from mail.centos.org (localhost [IPv6:::1])
>      by mail.centos.org (Postfix) with ESMTP id 011EE3C1F16;
>      Tue, 17 Sep 2019 13:56:03 +0000 (UTC)
> X-Original-To:centos at centos.org
> Delivered-To:centos at centos.org
> Received-SPF: Pass (sender SPF authorized) identity=mailfrom;
>   client-ip=81.19.4.73; helo=nirvana.intar.cz;envelope-from=mg at intar.cz;
>   receiver=centos at centos.org Received: from nirvana.intar.cz 
> (nirvana.intar.cz [81.19.4.73])
>   by mail.centos.org (Postfix) with ESMTPS id 640643C1F0F
>   for<centos at centos.org>; Tue, 17 Sep 2019 13:55:59 +0000 (UTC)
> Received: from larix.intarnet.cz (larix.intarnet.cz [192.168.1.53])
>   by nirvana.intar.cz (Postfix) with ESMTPS id 74992C045CD1;
>   Tue, 17 Sep 2019 15:55:57 +0200 (CEST)
> Received: from [192.168.1.176] (nirvana.intar.cz [81.19.4.73])
>   by larix.intarnet.cz (Postfix) with ESMTPSA id 5EB62104F460;
>   Tue, 17 Sep 2019 15:55:57 +0200 (CEST)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intar.cz; s=larix;
>   t=1568728557; bh=ezgga1YmsO9WxPgAc+7ouaZ9HJlG9XkA8LJjbiJd0yA=;
>   h=Subject:To:References:From:Date:In-Reply-To;
>   b=rSnG4eyiHg6tTDdBdCJyp1/ACUczgG+9usycftG3BMz1EwN0zPMPyo0gSkpvxwJUf
>   aM/jvd/gzFJVz7Z6MEw1A9iCE0ZzJy931WvXG+rIJR+Set5hb3fMpu1PgaOz1MIYTF
>   7Z24H3X1KwUPof1RaKHrFQLYFbr011IbEwz613Xo=
> To: CentOS mailing list<centos at centos.org>,
>   Mauricio Tavares<raubvogel at gmail.com>
> References:<b3f926b0-711f-4a32-4a61-644e707a8db8 at intar.cz>
>   <CAHEKYV42BVbAiPmCPnDPhQm53=+t6PVpjheXvjEY535kHFttSg at mail.gmail.com>
>   <ea092741-5941-c49d-7fe2-b4e8df9944ed at intar.cz>
>   <CAHEKYV5T8UJNB-PVoj=Aujje3MjN-HiAxKp9kcB24ZK6z8d2Kg at mail.gmail.com>
> From: Miroslav Geisselreiter<mg at intar.cz>
> Organization: INTAR a.s.
> Message-ID:<5502e8ac-6b01-18dd-e028-7d2dd666063b at intar.cz>
> Date: Tue, 17 Sep 2019 15:55:57 +0200
> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101
>   Firefox/52.0 SeaMonkey/2.49.4
> MIME-Version: 1.0
> In-Reply-To:<CAHEKYV5T8UJNB-PVoj=Aujje3MjN-HiAxKp9kcB24ZK6z8d2Kg at mail.gmail.com> 
> 
> Subject: Re: [CentOS] CentOS7 sometimes don't detect NIC after reboot
> X-BeenThere:centos at centos.org
> X-Mailman-Version: 2.1.15
> Precedence: list
> List-Id: CentOS mailing list <centos.centos.org>
> List-Unsubscribe:<https://lists.centos.org/mailman/options/centos>,
>   <mailto:centos-request at centos.org?subject=unsubscribe>
> List-Archive:<http://lists.centos.org/pipermail/centos/>
> List-Post:<mailto:centos at centos.org>
> List-Help:<mailto:centos-request at centos.org?subject=help>
> List-Subscribe:<https://lists.centos.org/mailman/listinfo/centos>,
>   <mailto:centos-request at centos.org?subject=subscribe>
> Reply-To: CentOS mailing list<centos at centos.org>
> Content-Transfer-Encoding: base64
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
> Errors-To:centos-bounces at centos.org
> Sender: "CentOS"<centos-bounces at centos.org>
> 
> 
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos

-- 
++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++