<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 12pt; font-family: Verdana,Geneva,sans-serif'>
<p id="reply-intro">On 12/11/2023 02:02, Dino Edwards wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div id="replybody1">
<style type="text/css">@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
#replybody1 p.v1MsoNormal, #replybody1 li.v1MsoNormal, #replybody1 div.v1MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 a:link, #replybody1 span.v1MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
#replybody1 a:visited, #replybody1 span.v1MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
#replybody1 pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
#replybody1 p.v1msonormal0, #replybody1 li.v1msonormal0, #replybody1 div.v1msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msonormal, #replybody1 li.v1v1msonormal, #replybody1 div.v1v1msonormal
{mso-style-name:v1msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msonormal0, #replybody1 li.v1v1msonormal0, #replybody1 div.v1v1msonormal0
{mso-style-name:v1msonormal0;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msochpdefault, #replybody1 li.v1v1msochpdefault, #replybody1 div.v1v1msochpdefault
{mso-style-name:v1msochpdefault;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 span.v1v1msohyperlink
{mso-style-name:v1msohyperlink;}
#replybody1 span.v1v1msohyperlinkfollowed
{mso-style-name:v1msohyperlinkfollowed;}
#replybody1 span.v1v1emailstyle18
{mso-style-name:v1emailstyle18;}
#replybody1 p.v1v1msonormal1, #replybody1 li.v1v1msonormal1, #replybody1 div.v1v1msonormal1
{mso-style-name:v1msonormal1;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msonormal2, #replybody1 li.v1v1msonormal2, #replybody1 div.v1v1msonormal2
{mso-style-name:v1msonormal2;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
#replybody1 span.v1v1msohyperlink1
{mso-style-name:v1msohyperlink1;
mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
#replybody1 span.v1v1msohyperlinkfollowed1
{mso-style-name:v1msohyperlinkfollowed1;
mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
#replybody1 span.v1EmailStyle29
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
#replybody1 span.v1EmailStyle30
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
#replybody1 span.v1HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
#replybody1 .v1MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
#replybody1 div.v1WordSection1
{page: unset;}</style>
<div lang="EN-US">
<div class="v1WordSection1">
<p class="v1v1msonormal1"> </p>
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">>That's correct, if you're using only opendmarc just the inet:127.0.0.1:54321 is needed, thats all you need, are you sure it >is adding sigs on sending? send an email to <a href="mailto:check-auth@verifier.port25.com" rel="noreferrer">check-auth@verifier.port25.com</a> wait a minute then check its results email.</span></p>
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">If opendmarc requires dkim signature verification before it makes a decision, I will need something that checks dkim first, right? I did send an e-mail to the e-mail address you suggested and everything looks good:</span></p>
<div id="v1signature">
<p class="v1MsoNormal"> </p>
</div>
</div>
</div>
</div>
</blockquote>
<p>DMARC (thus OpenDMARC) makes its decision based on the senders DMARC fo policy -</p>
<p>if policy uses fo=0 then yes, both SPF and DKIM must exist, and both must pass.</p>
<p>if policy uses fo=1 then no, as a minimum <em>either</em> SPF or DKIM must exist, and pass, so DMARC will work with only SPF or only DKIM, it will also work with both, which has the advantage that only one of these must pass, eg: SPF passes but DKIM fails, DMARC usinng fo=1 will pass.</p>
<p>I recommend fo=1 for general use but fo=0 for critical areas, like govts, legal and finance sectors, or those who deal with them on a very regular basis, in which case they wouldn't be authorised to use there govt/corp email for private use so if ill-configured mailing lists for example rejected them, then that's acceptable collateral damage.</p>
<p><br /></p>
<div id="signature">-- <br />
<p>Regards,<br />Noel Butler</p>
<table border="1" width="748" cellspacing="0" cellpadding="1">
<tbody>
<tr>
<td style="text-align: left;">
<p><span style="font-size: 9pt;"><span style="font-family: arial,helvetica,sans-serif;">This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.</span></span></p>
</td>
</tr>
</tbody>
</table>
<p><br /></p>
</div>
</body></html>