Outbound Relay and DMARC

[pingu]

Hey Folks,

We are a webhosting company with several dozen mail servers that send email to out EFA-project box:

Customer SMTP --> internal SMTP gateway --> EFa-Project --> Internet


The 'internal SMTP gateway' servers are all under private IP addresses.


The issue I see is that eFa-Project is sending DMARC reports to our customers with "Failure" in the results. Mainly due to the mail headers having our 'Internal SMTP gateway' private IP addresses (192.168.0.x):

Example:
<source_ip>192.168.120.11</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>


What is the best way to setup eFa-project, keeping in mind that several thousand of our customers use SPF/DKIM/DMARC?

[shawniverson]

You can add your address to the trusted and/or ignore lists for opendmarc.