dmarc fail on paypal

Bugs in eFa 4
Post Reply
nicola.piazzi
Posts: 372
Joined: 23 Apr 2015 09:45

dmarc fail on paypal

Post by nicola.piazzi » 17 Feb 2021 09:55

I have a lot of dmarc failed also if they are ok in dkim and spf, here an example




-0.20 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.30 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain
-0.20 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain
-0.15 SPF_PASS SPF: sender matches SPF record

Message Headers: Received: from mx2.slc.paypal.com (mx3.slc.paypal.com [173.0.84.228])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(no client certificate requested)
by EFA42.gruppocomet.it (MailScanner Milter) with SMTP id 4DgY4Q1TzFzZLV3c
for <ecommerce@gruppocomet.it>; Wed, 17 Feb 2021 10:50:47 +0100 (CET)
X-Greylist: from auto-whitelisted by SQLgrey-1.8.0
DMARC-Filter: OpenDMARC Filter v1.3.2 EFA42.gruppocomet.it 4DgY4Q1TzFzZLV3c
Authentication-Results: EFA42.gruppocomet.it; dmarc=fail (p=reject dis=none) header.from=paypal.it
DKIM-Signature: v=1; a=rsa-sha256; d=paypal.it; s=pp-dkim1; c=relaxed/relaxed;
q=dns/txt; i=@paypal.it; t=1613555444;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=uGfjsZQcORG7TZMu8HcoIhHFILj/dzXVhAWxcK8JRKw=;
b=EXLMKGDu4luNydZIUia1d8vY+mE3jcjcFo6psNXqORhZM2t1FSYZRdexwgHog81z
xrUOy0al2dhvSHNX0gHY2krW0+UzN7SlG839DRFRi0nJkhJnTfkbD+TAEQy0+4Y6
6lz5/C6bs+noHIhmfaBUpVumstrGoKjyh4kojDvSv8fqiOgmsR08hSfCKn2xE5Nk
l7UOjOnb/leqAjrziZ7YyGIRBgTZtjdewlfjIcWHrWbE1GFXHxq4rVNF9zTlkbRI
oc8IPezYBWkv+m2cUGQlaqm70zKj+AsGqpFD/22fva0vVoWGvkbzX+KK7cULYUiQ
OP9OrpNVpsvwQKdn5ng0ag==;
Received: (qmail 2648103 invoked by uid 993); 17 Feb 2021 09:50:44 -0000
Date: Wed, 17 Feb 2021 01:50:44 -0800
Message-Id: <1613555444.2648103@paypal.com>
X-PP-Priority: 0-none-false
AMQ-Delivery-Message-Id: EMAILDELIVERY-Notification_EmailDeliveryEvent-253-1613555437950-3321516157
X-PP-REQUESTED-TIME: 1613555434184
X-PP-Email-transmission-Id: 95797a4e-7105-11eb-9d5c-b875c0165791
PP-Correlation-Id: 7a7c06d61d98f
Subject: Notifica di pagamento ricevuto
X-MaxCode-Template: PPX001069
To: Gruppo Comet <ecommerce@gruppocomet.it>
From: Marisa Conte tramite PayPal <assistenza@paypal.it>
X-Email-Type-Id: PPX001069
Reply-To: Marisa Conte <marisa.conte@libero.it>
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
MIME-Version: 1.0
From:
assistenza@paypal.it [Add to Whitelist | Add to Blacklist]

nicola.piazzi
Posts: 372
Joined: 23 Apr 2015 09:45

Re: dmarc fail on paypal

Post by nicola.piazzi » 17 Feb 2021 10:10

If i put directive
SPFSelfValidate true

A new line appear, it tell that opendmarc made itself spf test

Authentication-Results: EFA42.gruppocomet.it; dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: EFA42.gruppocomet.it; spf=pass smtp.mailfrom=uta.fac@gmail.com

so dmarc pass if we have an spf valid but it was unable to find it in header

dkim is also a problem, it seems that opendmark is unable to see opendkim results, perhaps is a test precedence problem !

User avatar
shawniverson
Posts: 3398
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: dmarc fail on paypal

Post by shawniverson » 17 Feb 2021 10:23

I wonder why opendkim isn't doing its job here. I would expect it to check the dkim signature before opendmarc makes its decision.

nicola.piazzi
Posts: 372
Joined: 23 Apr 2015 09:45

Re: dmarc fail on paypal

Post by nicola.piazzi » 17 Feb 2021 10:25

probably solved using Mode sv in opendkim.conf

Post Reply