[Rspamd-Users] DMARC Status in the absence of DKIM

[Webmaster]

Hi Alexander and Marco.

Thank you for responding to my message. It's now clear to me that in 
order to pass DMARC either:

1. SPF must pass and align
or
2. DKIM must pass and align.

In that message SPF was both passed and aligned, that's why DMARC got 
passed.

Thanks for correcting me.

Kind regards,


M F Faruqi
> Alexander Moisseev via Users <mailto:users at lists.rspamd.com>
> Friday, April 16, 2021 12:29
>
>
> The message got DMARC_POLICY_ALLOW since it passed SPF check. Policy 
> is irrelevant in this case.
>
> For scan result policy matters only if DMARC is failed. E.g. for 
> policy=none Rspamd inserts DMARC_POLICY_SOFTFAIL symbol and 
> DMARC_POLICY_REJECT for policy=reject.
> Marco Pizzoli <mailto:marco.pizzoli at gmail.com>
> Friday, April 16, 2021 11:15
> Hi,
> the involved domain has a DMARC policy of "none", so it is expected.
> https://mxtoolbox.com/SuperTool.aspx?action=dmarc%3akontaktybiznesowe.pl&run=toolpage
>
> The status reported in your email confirms this as well:
> dmarc=pass (*policy=none*) header.from=kontaktybiznesowe.pl;
>
>
> Regards
> Marco
>
>
> On Fri, Apr 16, 2021 at 5:03 AM Webmaster via Users 
> <users at lists.rspamd.com>
> Webmaster via Users <mailto:users at lists.rspamd.com>
> Friday, April 16, 2021 8:01
> Hi all,
>
> Today I received a spam message and I cannot decipher why Rspamd 
> didn't fail DMARC in the absence of DKIM? As per my understanding to 
> pass DMARC:
>
> 1. SPF must pass.
> 2. DKIM must pass.
> and at least one of:
> 3. SPF should be aligned.
> 4. DKIM should be aligned.
>
> Here are the spam message headers:
> #############################
> Return-Path: <05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl>
> Delivered-To: support at mindbuild.com
> Received: from mail.mindbuilt.com
>     by mail.mindbuilt.com with LMTP
>     id uIC6KU0feGB2PgAAlukYaw
>     (envelope-from 
> <05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl>)
>     for <support at mindbuild.com>; Thu, 15 Apr 2021 16:11:09 +0500
> Received: from srv103.kontaktybiznesowe.pl 
> (srv103.kontaktybiznesowe.pl [192.236.162.103])
>     (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
>      key-exchange X25519 server-signature RSA-PSS (2048 bits) 
> server-digest SHA256)
>     (No client certificate requested)
>     by mail.mindbuilt.com (Postfix) with ESMTPS id 4D60C4012D
>     for <support at mindbuild.com>; Thu, 15 Apr 2021 16:11:08 +0500 (PKT)
> Subject: =?utf-8?q?tylko_48.88_EUR_za_Polsk=C4=85_Baz=C4=99_Danych?=
> Precedence: bulk
> X-Original-To: support at mindbuild.com
> From: "=?utf-8?q?Polska_baza_danych_kontakt=C3=B3w?=" 
> <sales at kontaktybiznesowe.pl>
> To: support at mindbuild.com
> Content-Type: multipart/alternative; 
> boundary="895fb80ae1edc1403c69aafe4ce0816fd405987af1a8f52c308f7cb50a95"
> User-Agent: YPC
> Message-Id: <f56bc2-607707eb-082262-05e2-8da9a at ys>
> Date: Thu, 15 Apr 2021 11:11:04 +0000
> Mime-Version: 1.0
> X-Spamd-Result: default: False [-0.75 / 150.00];
>      MID_RHS_NOT_FQDN(0.50)[];
>      ARC_NA(0.00)[];
>      XM_UA_NO_VERSION(0.01)[];
>      FROM_HAS_DN(0.00)[];
>      MV_CASE(0.50)[];
>      TO_MATCH_ENVRCPT_ALL(0.00)[];
>      MIME_GOOD(-0.10)[multipart/alternative,text/plain];
>      HTML_SHORT_LINK_IMG_2(1.00)[];
>      TO_DN_NONE(0.00)[];
>      RCPT_COUNT_ONE(0.00)[1];
>      PRECEDENCE_BULK(0.00)[];
>      MANY_INVISIBLE_PARTS(0.05)[1];
>      R_SPF_ALLOW(-1.00)[+ip4:192.236.162.103];
>      MX_GOOD(-0.01)[];
>      DMARC_POLICY_ALLOW(-2.00)[kontaktybiznesowe.pl,none];
>  FORGED_SENDER(0.30)[sales at kontaktybiznesowe.pl,05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl]; 
>
>      RCVD_COUNT_ZERO(0.00)[0];
>      RWL_MAILSPIKE_POSSIBLE(0.00)[192.236.162.103:from];
>      R_DKIM_NA(0.00)[];
>      MIME_TRACE(0.00)[0:+,1:+,2:~];
>  FROM_NEQ_ENVFROM(0.00)[sales at kontaktybiznesowe.pl,05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl] 
>
> X-Spamd-Bar: /
> X-Rspamd-Server: mail.mindbuilt.com
> X-Rspamd-Queue-Id: 4D60C4012D
> Authentication-Results: mail.mindbuilt.com;
>     dkim=none;
>     dmarc=pass (policy=none) header.from=kontaktybiznesowe.pl;
>     spf=pass (mail.mindbuilt.com: domain of 
> 05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl designates 
> 192.236.162.103 as permitted sender) 
> smtp.mailfrom=05e24451ebffbadf839e65320658da9a at kontaktybiznesowe.pl
> #############################
>
> My question is why DMARC status is pass instead of being failed? Am I 
> missing some setting?
>
> Regards,
>
> M F Faruqi