I've unmunged this mostly--I can't remember the name of the email account,
but all else is as it was, in the hopes that'll be useful. 144.167.8.120 is
the outbound node:
# exigrep R=1p7Hiz-00010h-3B main.log
2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim
P=local S=3157
2022-12-19 09:08:49 1p7Hl3-00015O-1S H=ASPMX.L.GOOGLE.COM[142.250.114.27]:
SMTP error from remote mail server after pipelined end of data: 421-4.7.0
This message does not pass authentication checks (SPF and DKIM both
do\n421-4.7.0 not pass). SPF check for [] does not pass with ip:
[144.167.8.120].To\n421-4.7.0 best protect our users from spam, the message
has been blocked.\n421-4.7.0 Please visit\n421-4.7.0
https://support.google.com/mail/answer/81126#authentication for more\n421
4.7.0 information. i124-20020acab882000000b00355785aa693si7304080oif.43 -
gsmtp
2022-12-19 09:08:50 1p7Hl3-00015O-1S => something@???
<redacted@???>R=dnslookup T=remote_smtp
H=ALT1.ASPMX.L.GOOGLE.COM [142.250.152.27]
X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes K C="250 2.0.0 OK
l5-20020a0566022dc500b006ceacbe1851si8859449iow.64 - gsmtp"
2022-12-19 09:08:50 1p7Hl3-00015O-1S Completed
On Mon, Dec 19, 2022 at 6:29 PM Johnnie W Adams <jxadams@???> wrote:
> The way our routing is set up (which I interited), everything which passes
> out of the data center should at some point enter the inbound node, where
> it gets a DKIM signature, and be passed to the outbound node. Sending this
> directly out via the outbound node is resulting in DMARC failure due to no
> signature.
>
> On Mon, Dec 19, 2022 at 5:38 PM Jeremy Harris via Exim-users <
> exim-users@???> wrote:
>
> Also, why would sending a bounce to your *inbound* have been the right
> thing?
> --
> Cheers,
> Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>
> --
> John Adams
> Senior Linux/Middleware Administrator | Information Technology Services
> +1-501-916-3010 | jxadams@??? | http://ualr.edu/itservices
> *UA Little Rock*
>
> Reminder: IT Services will never ask for your password over the phone or
> in an email. Always be suspicious of requests for personal information that
> come via email, even from known contacts. For more information or to
> report suspicious email, visit IT Security
> <http://ualr.edu/itservices/security/>.
>
--
John Adams
Senior Linux/Middleware Administrator | Information Technology Services
+1-501-916-3010 | jxadams@??? |
http://ualr.edu/itservices
*UA Little Rock*
Reminder: IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts. For more information or to
report suspicious email, visit IT Security
<
http://ualr.edu/itservices/security/>.
