<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 12pt; font-family: Verdana,Geneva,sans-serif'>
<p id="reply-intro">On 11/11/2023 23:03, Dino Edwards wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div id="replybody1">
<style type="text/css">@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
#replybody1 p.v1MsoNormal, #replybody1 li.v1MsoNormal, #replybody1 div.v1MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 a:link, #replybody1 span.v1MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
#replybody1 a:visited, #replybody1 span.v1MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
#replybody1 p.v1msonormal0, #replybody1 li.v1msonormal0, #replybody1 div.v1msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 span.v1EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
#replybody1 .v1MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
#replybody1 div.v1WordSection1
{page: unset;}</style>
<div lang="EN-US">
<div class="v1WordSection1">
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">>most DMARC's I find still use quarantine, what responses are you seeing for them?</span></p>
<p>I don't have any p=quarantine examples right now.</p>
</div>
</div>
</div>
</blockquote>
<div id="replybody1">
<div lang="EN-US">
<div class="v1WordSection1">
<div>
<p class="v1MsoNormal"><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">the domain you're using now has quarantine policy :)<br /></span></p>
<p class="v1MsoNormal"> </p>
</div>
</div>
</div>
</div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div id="replybody1">
<div lang="EN-US">
<div class="v1WordSection1">
<div>
<p class="v1MsoNormal"><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">o dont need to setup amavisd as a milter if its working fine already.</span></p>
<p class="v1MsoNormal"> </p>
<p class="v1MsoNormal">Well, I can see Damien's point here. Originally with OpenDKIM the Postfix milter was setup in the following order where 8891 is OpenDKIM and 54321 is OpenDMARC:</p>
</div>
<div id="v1signature">
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">smtpd_milters = inet:127.0.0.1:8891, inet:127.0.0.1:54321</span></p>
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">So OpenDKIM would insert the authentication headers and OpenDMARC would parse them. By using the amavis as content_filter i.e. post-queue, OpenDMARC never sees the authentication headers so it always fails but in the case of p=none it doesn't make a difference and it passes anyway.</span></p>
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">Unless I'm thinking about it wrong.</span></p>
</div>
</div>
</div>
</div>
</blockquote>
<p>That's correct, if you're using only opendmarc just the inet:127.0.0.1:54321 is needed, thats all you need, are you sure it is adding sigs on sending? send an email to <a href="mailto:check-auth@verifier.port25.com">check-auth@verifier.port25.com</a> wait a minute then check its results email.</p>
<p><br /></p>
<div id="signature">--<br />
<p>Regards,<br />Noel Butler</p>
<table border="1" width="748" cellspacing="0" cellpadding="1">
<tbody>
<tr>
<td style="text-align: left;">
<p><span style="font-size: 9pt;"><span style="font-family: arial,helvetica,sans-serif;">This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.</span></span></p>
</td>
</tr>
</tbody>
</table>
<p><br /></p>
</div>
</body></html>