Re: [dmarc-ietf] dmarc and forwarding

Franck Martin <franck@peachymango.org> Thu, 30 January 2014 22:39 UTC

Return-Path: <franck@peachymango.org>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E5A11A04DA for <dmarc@ietfa.amsl.com>; Thu, 30 Jan 2014 14:39:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7CWSOHS1uxTu for <dmarc@ietfa.amsl.com>; Thu, 30 Jan 2014 14:39:52 -0800 (PST)
Received: from smtp.01.com (smtp.01.com [199.36.142.181]) by ietfa.amsl.com (Postfix) with ESMTP id CF7D01A039C for <dmarc@ietf.org>; Thu, 30 Jan 2014 14:39:52 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by smtp-out-2.01.com (Postfix) with ESMTP id 6DC0B3983E8; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
X-Virus-Scanned: amavisd-new at smtp-out-2.01.com
Received: from smtp.01.com ([127.0.0.1]) by localhost (smtp-out-2.01.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HxYpVfpSHNDJ; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
Received: from smtp.01.com (localhost [127.0.0.1]) by smtp-out-2.01.com (Postfix) with ESMTP id 50193398459; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
Received: from localhost (localhost [127.0.0.1]) by smtp-out-2.01.com (Postfix) with ESMTP id 42918398458; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
X-Virus-Scanned: amavisd-new at smtp-out-2.01.com
Received: from smtp.01.com ([127.0.0.1]) by localhost (smtp-out-2.01.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id tYL82oSpaqSM; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
Received: from mail-2.01.com (mail.01.com [172.18.30.178]) by smtp-out-2.01.com (Postfix) with ESMTP id 156023983E8; Thu, 30 Jan 2014 16:39:49 -0600 (CST)
Date: Thu, 30 Jan 2014 16:39:48 -0600
From: Franck Martin <franck@peachymango.org>
To: Kurt Roeckx <kurt@roeckx.be>
Message-ID: <1762762424.26365.1391121588323.JavaMail.zimbra@peachymango.org>
In-Reply-To: <WM!6bb3f78a7feaec45cd6e16db08822359f618288053561e2a2c08e397644e063795fab5be7076e0d2e8163de4e710e3ff!@asav-2.01.com>
References: <20140130220330.GA25608@roeckx.be> <52EACDBF.2050003@bluepopcorn.net> <20140130222320.GB25641@roeckx.be> <WM!6bb3f78a7feaec45cd6e16db08822359f618288053561e2a2c08e397644e063795fab5be7076e0d2e8163de4e710e3ff!@asav-2.01.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [69.28.149.129]
X-Mailer: Zimbra 8.0.5_GA_5839 (ZimbraWebClient - FF26 (Mac)/8.0.5_GA_5839)
Thread-Topic: dmarc and forwarding
Thread-Index: cwAnl+Zafp2nIw26cisTgDmaz9pdIw==
Cc: Jim Fenton <fenton@bluepopcorn.net>, dmarc@ietf.org
Subject: Re: [dmarc-ietf] dmarc and forwarding
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jan 2014 22:39:54 -0000

----- Original Message -----
> From: "Kurt Roeckx" <kurt@roeckx.be>
> To: "Jim Fenton" <fenton@bluepopcorn.net>
> Cc: dmarc@ietf.org
> Sent: Thursday, January 30, 2014 2:23:20 PM
> Subject: Re: [dmarc-ietf] dmarc and forwarding
> 
> On Thu, Jan 30, 2014 at 02:10:07PM -0800, Jim Fenton wrote:
> > On 1/30/14 2:03 PM, Kurt Roeckx wrote:
> > > Please don't say that DKIM is a fallback.  90% of the e-mails
> > > with DKIM that I receive have a bad DKIM signature.
> > Wow, that seems really high.  These are legitimate messages?
> 
> Yes, those are real messages.
> 

It seems to me that all the emails sent to you go via first an email gateway before landing on your mail server

Received: from defiant.e-webshops.eu (defiant.e-webshops.eu [82.146.122.140])
 by ietfa.amsl.com (Postfix) with ESMTP id 3E2D21A04CC for <dmarc@ietf.org>;
 Thu, 30 Jan 2014 14:23:24 -0800 (PST)
Received: from intrepid.roeckx.be (localhost [127.0.0.1]) by
 defiant.e-webshops.eu (Postfix) with ESMTP id 5E2791C215E; Thu, 30 Jan 2014
 23:23:20 +0100 (CET)

And the MX for your domain seems to confirm that

It is not uncommon to find gateways that rewrite the message therefore breaking DKIM.

Please request defiant.e-webshops.eu to not modify the email while in transit (likely just changing the encoding)