Dear all,
I'm running an SME 9.2 up-to-date. I configured email following this how-to:
https://wiki.contribs.org/Email#DKIM_Setup_-_qpsmtpd_version_.3E.3D_0.96Another SME 9.2 (also up-to-date) in another location with a different domain, gives a dmarc report, I don't understand:
---
This is a DMARC aggregate report for ivbonline.de
1 records.
0 passed.
1 failed.
---
Uploading the report to
https://us.dmarcian.com/xml-to-human-converter/ shows:
DMARC Compliance: 0% (SPF: 0%, DKIM: 0%)
DKIM DMARC fail
SPF DMARC fail
ivbonline.de is configured as followed:
#config show qpsmtpd
qpsmtpd=service
BadCountries=A1,AC,AD,AE,AF,AG,AI,AL,AM...
Bcc=enabled
BccMode=bcc
BccUser=maillog
DKIMSigning=enabled
DMARCReject=enabled
DMARCReporting=enabled
DNSBL=enabled
GeoIP=enabled
Karma=enabled
KarmaNegative=3
KarmaStrikes=3
LogLevel=6
MaxScannerSize=250000000
RBLList=zen.spamhaus.org,bl.spamcop.net,dnsbl-1.uceprotect.net
RHSBL=enabled
RelayRequiresAuth=enabled
SBLList=multi.surbl.org,rhsbl.sorbs.net,dbl.spamhaus.org,black.uribl.com
SPFRejectPolicy=1
TlsBeforeAuth=1
UBLList=multi.surbl.org:8-16-64-128,black.uribl.com,rhsbl.sorbs.net
URIBL=enabled
access=public
qplogsumm=disabled
status=enabled
# qpsmtpd-print-dns
Here are sample DNS entries you should add in your public DNS
The DKIM entry can be copied as is, but others will probably need to be adjusted
to your need. For example, you should either change the reporting email adress
for DMARC (or create the needed pseudonym)
default._domainkey IN TXT "v=DKIM1;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCA... t=y"
@ IN SPF "v=spf1 mx a -all"
@ IN TXT "v=spf1 mx a -all"
_dmarc IN TXT "v=DMARC1; p=none; adkim=s; aspf=r; rua=mailto:dmarc-feedback@ivbonline.de; pct=100"
The TXT records of the ISP are configured as followed:
v=spf1 ip4:87.140.117.154 -all (static IP for ivbonline.de)
v=DMARC1; p=quarantine; adkim=s; aspf=r; rua=mailto:dmarc-feedback@ivbonline.de; pct=100
v=DKIM1;=MIIBIjANBgkqhkiG9w0BAQEFAA...
Running the domain or an email from the domain against tools like mxtoolbox, dmarcian spf check, mail-tester, kitterman, etc. is giving no error.
At this point I've no idea what's wrong. Any help would be greatly appreciated.
regards,
stefan