DMARC policy reject

[Jochen Fahrner]

Hallo,

also mit der reject policy habe ich irgendwie kein Glück. Jetzt kann ich
nicht mal mehr an die Liste senden. Musste das wieder auf "none"
zurückstellen.

Hier ein Bounce aus der Liste:

This is an authentication failure report for an email message received from IP
141.42.206.35 on Thu, 18 Sep 2014 08:48:16 +0200 (CEST).



Feedback-Type: auth-failure
Version: 1
User-Agent: OpenDMARC-Filter/1.3.0
Auth-Failure: dmarc
Authentication-Results: s2.fahrner.name; dmarc=fail header.from=fahrner.name
Original-Envelope-Id: 8BF263403F
Original-Mail-From: postfix-users-bounces+jf=fahrner.name at de.postfix.org
Source-IP: 141.42.206.35
Reported-Domain: fahrner.name



Received: from postfix.charite.de (postfix.charite.de [141.42.206.35])
	(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by s2.fahrner.name (Postfix) with ESMTPS id 8BF263403F
	for <jf at fahrner.name>; Thu, 18 Sep 2014 08:48:16 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by de.postfix.org (Postfix) with ESMTP id 7A2123E16F
	for <jf at fahrner.name>; Thu, 18 Sep 2014 08:48:13 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=de.postfix.org;
	 h=list-subscribe:list-help:list-post:list-archive
	:list-unsubscribe:list-id:precedence:content-type:content-type
	:in-reply-to:references:subject:subject:mime-version:user-agent
	:from:from:date:date:message-id:received:received:received
	:received:received:received; s=200801; t=1411022893; bh=AZBFENdP
	YA+2fANCRZoigwbAzFKzQJpDLwn+IdE1vEk=; b=EIThI6owH3OZzMJTxx/0OcT9
	t8aF7XMEG7ENwIzw+nWh/UI2I97+Kqq3MKVRd11cmn6ImBQqs/iHGgFmrP1gzOJk
	ol48r74u0Wp6abxaJiNMwQ7tH2RguD6OUjgSnvMvHqdw+dKjhxtL4q6G/JmoEq2Y
	91tauhqeOY05ZhZoHoM=
X-Virus-Scanned: Debian amavisd-new at de.postfix.org
Received: from de.postfix.org ([127.0.0.1])
	by localhost (de.postfix.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 1wu1jmejV6g1 for <jf at fahrner.name>;
	Thu, 18 Sep 2014 08:48:13 +0200 (CEST)
Received: from de.postfix.org (localhost [127.0.0.1])
	by de.postfix.org (Postfix) with ESMTP
	for <jf at fahrner.name>; Thu, 18 Sep 2014 08:48:13 +0200 (CEST)
X-Original-To: postfix-users at de.postfix.org
Delivered-To: postfix-users at de.postfix.org
Received: from localhost (localhost [127.0.0.1])
 by de.postfix.org (Postfix) with ESMTP id 1F7EB3E12D
 for <postfix-users at de.postfix.org>; Thu, 18 Sep 2014 08:48:03 +0200 (CEST)
Received: from de.postfix.org ([127.0.0.1])
 by localhost (de.postfix.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id LRutxneao4d8 for <postfix-users at de.postfix.org>;
 Thu, 18 Sep 2014 08:47:58 +0200 (CEST)
Received: from s2.fahrner.name (s2.fahrner.name [78.46.184.248])
 by de.postfix.org (Postfix) with ESMTPS
 for <postfix-users at de.postfix.org>; Thu, 18 Sep 2014 08:47:58 +0200 (CEST)
Received: from [0.0.0.0] (unknown [166.70.207.2])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by s2.fahrner.name (Postfix) with ESMTPSA id 88FE83403F
 for <postfix-users at de.postfix.org>; Thu, 18 Sep 2014 08:47:55 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fahrner.name; s=mail;
 t=1411022878; bh=AZBFENdPYA+2fANCRZoigwbAzFKzQJpDLwn+IdE1vEk=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=HMyOar/eFriYHqJm3SM2WuYlfy1OOi2vFkXzSmsWi5blZaiEY+oVEdu3IXxIOEQNr
 E0N3BXsvPPnQricdG078u0NdhMxDg4dVf6nljJ7EyXlihV5tMDDd2oR1F+AksHD+kS
 JQtQEZPwFShwR4hcp9CtuTejSupTMiMtZHPC7Itc=
Message-ID: <541A8011.3090807 at fahrner.name>
Date: Thu, 18 Sep 2014 08:47:45 +0200
From: Jochen Fahrner <jf at fahrner.name>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:17.0) Gecko/20130509 Thunderbird/17.0.6
MIME-Version: 1.0
To: postfix-users at de.postfix.org
Subject: Re: OpenDMARC IgnoreAuthenticatedClients
References: <1410985410.25010.383.camel at Thinkpad.lan>
 <5419F530.2000504 at sys4.de>
In-Reply-To: <5419F530.2000504 at sys4.de>
X-Enigmail-Version: 1.6
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
 micalg=sha1; boundary="------------ms080100090202000002000303"
X-BeenThere: postfix-users at de.postfix.org
X-Mailman-Version: 2.1.16rc2
Precedence: list
List-Id: Mailing-Liste der deutschsprachigen Postfix Gemeinschaft
 <postfix-users.de.postfix.org>
List-Unsubscribe: <http://de.postfix.org/cgi-bin/mailman/options/postfix-users>, 
 <mailto:postfix-users-request at de.postfix.org?subject=unsubscribe>
List-Archive: <http://de.postfix.org/pipermail/postfix-users/>
List-Post: <mailto:postfix-users at de.postfix.org>
List-Help: <mailto:postfix-users-request at de.postfix.org?subject=help>
List-Subscribe: <http://de.postfix.org/cgi-bin/mailman/listinfo/postfix-users>, 
 <mailto:postfix-users-request at de.postfix.org?subject=subscribe>
Errors-To: postfix-users-bounces+jf=fahrner.name at de.postfix.org
Sender: "postfix-users" <postfix-users-bounces+jf=fahrner.name at de.postfix.org>


Laut Returnpath reflector ist aber alles gut. Mich wundert nur das "
No DomainKeys signature(s) found.".

Return Path DKIM/SPF Reflector Report
=====================================
Source IP = 78.46.184.248
Mail From = jf at fahrner.name

Identity Alignment Results
==========================
SPF Domain Alignment Result = PASS
	The From domain 'fahrner.name' is an exact match with the SPF domain 'fahrner.name'.
	Note that no alignment policy was defined in a DMARC record, so the policy defaulted to relaxed.

DKIM Domain Alignment Results:
	Result for DNS Record: mail._domainkey.fahrner.name = PASS
	The From domain 'fahrner.name' is an exact match with the DKIM domain 'fahrner.name'.
	Note that no alignment policy was defined in a DMARC record, so the policy defaulted to relaxed.

DKIM Results
============
Result = pass
Domain = fahrner.name
Selector = mail
DNS Record(s) =
	mail._domainkey.fahrner.name TXT v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQ CX6HDfEw5BOPwL8C4idNjgb/YCKvbroUyEZ82MYIhu442XZJ7Y3BeFd2U/HVj9LM4M9qGNX32VOp2PXO PoIxKa5+w6mMOcsp3WblUUQ/yMhLOTnIupmzB6/h0CDAsWamLKrxnz7JuUbCeLc7KcWoBTDUiS6x23j8 KFcotlAD30owIDAQAB
	Public Key Length = 1024

DomainKeys Results
==================
No DomainKeys signature(s) found.

SPF Results
===========
Result = pass
Domain = fahrner.name
DNS Record(s) =
	fahrner.name TXT v=spf1 mx -all

DMARC Results
=============
Domain = _dmarc.fahrner.name
DNS Record = 
	_dmarc.fahrner.name TXT v=DMARC1;p=reject

DMARC Record Validation Results
===============================
DMARC Errors Detected: None.
Non-DMARC flags encountered (skipped): None.

Visit http://www.returnpath.com/solution-content/dmarc-support/ for more information on DMARC record creation and validation.


-- 
Mit besten Grüßen
Jochen Fahrner

-------------- nächster Teil --------------
Ein Dateianhang mit HTML-Daten wurde abgetrennt...
URL: <http://de.postfix.org/pipermail/postfix-users/attachments/20140918/ae9f0916/attachment-0001.html>
-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : smime.p7s
Dateityp    : application/pkcs7-signature
Dateigröße  : 4956 bytes
Beschreibung: S/MIME Kryptografische Unterschrift
URL         : <http://de.postfix.org/pipermail/postfix-users/attachments/20140918/ae9f0916/attachment-0001.bin>