DMARC reports after emails sent to list
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi,
I have DMARC with DKIM and SPF setup for my domain name.
When I sent emails to Debian lists, I tend to get a bunch of DMARC
reports as a result. The reports of concern are ones that show a
sending IP for my domain that is the IP of the Debian mail server for
the list.
Is this due to email forwarding by Debian servers or is it for some
other reason? How can I fix this?
Do I need to add Debian's IP address to my SPF record? I'm not sure I
want to, but it may end the DMARC reports with failed SPF tests...
Here is the output from a report:
$ zcat
noloop.tana.it\!affinityvision.com.au\!1570838400\!1570924800\!e4b6e7354
eab4dd19d4c5016fd8a34e2.xml.gz
<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>tana.it</org_name>
<email>postmaster@noloop.tana.it</email>
<report_id>e4b6e7354eab4dd19d4c5016fd8a34e2</report_id>
<date_range>
<begin>1570838400</begin>
<end>1570924800</end>
</date_range>
</report_metadata>
<policy_published>
<domain>affinityvision.com.au</domain>
<adkim>s</adkim>
<aspf>s</aspf>
<p>quarantine</p>
<sp>none</sp>
</policy_published>
<record>
<row>
<source_ip>82.195.75.100</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>affinityvision.com.au</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>affinityvision.com.au</domain>
<selector>2018061201</selector>
<result>pass</result>
</dkim>
<spf>
<domain>lists.debian.org</domain>
<result>permerror</result>
<scope>mfrom</scope>
</spf>
</auth_results>
</record>
</feedback>
Thanks and Kind Regards
AndrewM
-----BEGIN PGP SIGNATURE-----
iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXaK0CgAKCRCoFmvLt+/i
+0oLAQDVneyJiLw6C9SM4DDCpNTejcIYlyYV3nLkUY3g714q4wD/al7A+fGiON6J
oCgMSMPrAg4ykZYhLcg2UIMDbaWv92Y=
=tUMU
-----END PGP SIGNATURE-----
Reply to: