Good day Victor (and Jeremy!),
Thanks for your advice, super on point regarding the issues I've been
facing. I've had this project on hold for awhile and just picking it up now
so apologies for the tardy response.
I was sceptical about building Exim with ARC authentication - being an
experimental feature and not widely adopted anyhow, so I'm glad there's a
workaround to disable arc authentication in opendmarc.
I've patched opendmarc and exim and also updated the opendmarc SQL as
you've recommended.
The opendmarc patch and SQL modifications are working like a charm! However
unfortunately the exim patch hasn't resolved the lack of SPF/DKIM details
being logged to the dmarc history file.
Sorry to trouble you further, but do you have any other ideas? here's a
debug output from Exim for a delivery:
https://pastebin.com/iZEiEHu9
The corresponding delivery log in the dmarc history file:
reporter server.hostname.com.au
received 1692234968
ipaddr 209.85.215.171
from gmail.com
mfrom gmail.com
spf 0
dkim gmail.com 0
pdomain gmail.com
policy 15
rua
mailto:mailauth-reports@google.com
pct 100
adkim 114
aspf 114
p 110
sp 113
align_dkim 4
align_spf 4
action 2
And also the delivery information in the exim mainlog:
2023-08-17 11:16:06.760 [2565238] SMTP connection from
[209.85.215.171]:56649 I=[103.209.24.57]:25 (TCP/IP connection count = 1)
2023-08-17 11:16:07.591 [2565282] SPF validation passed
2023-08-17 11:16:08.276 [2565282] 1qWRcO-00AlLW-0O DKIM validation passed
2023-08-17 11:16:08.276 [2565282] 1qWRcO-00AlLW-0O DKIM: d=gmail.com
s=20221208 c=relaxed/relaxed a=rsa-sha256 b=2048 t=1692234966 x=1692839766
[verification succeeded]
2023-08-17 11:16:08.561 [2565282] 1qWRcO-00AlLW-0O H=
mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25
Warning: "SpamAssassin as sslreservedsite detected message as NOT spam
(-0.2)"
2023-08-17 11:16:08.565 [2565282] 1qWRcO-00AlLW-0O DMARC results:
spf_domain=gmail.com dmarc_domain=gmail.com spf_align=yes dkim_align=yes
enforcement='Accept'
2023-08-17 11:16:08.567 [2565282] 1qWRcO-00AlLW-0O H=
mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25
Warning: DMARC STATUS: accept gmail.com
2023-08-17 11:16:08.576 [2565282] 1qWRcO-00AlLW-0O <= mackenzie@??? H=
mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25
P=esmtps L.- X=TLS1.3:TLS_AES_128_GCM_SHA256:128 CV=no SNI=
mail.demo-domain.com.au S=4704 M8S=0 DKIM=gmail.com RT=0.151s id=CAD2o6Gz8F=
MVWJJ0N0W-FdmxU8W7ZAVmsiyA3R_F+eon42nO-w@??? T="test" from <
mackenzie@???> for info@???
2023-08-17 11:16:08.593 [2565296] cwd=/var/spool/exim 6 args:
/usr/sbin/exim -d=0xf7795cfd -MCd daemon-accept-delivery -Mc
1qWRcO-00AlLW-0O
2023-08-17 11:16:08.730 [2565282] SMTP connection from
mail-pg1-f171.google.com [209.85.215.171]:56649 I=[103.209.24.57]:25 closed
by QUIT
2023-08-17 11:16:08.742 [2565296] 1qWRcO-00AlLW-0O => info <
info@???> F=<mackenzie@???> P=<mackenzie@???>
R=virtual_user T=dovecot_virtual_delivery S=4923 C="250 2.0.0 <
info@???> wQpQKdh03WS2JCcAK/qN0w Saved" QT=0.470s DT=0.069s
2023-08-17 11:16:08.743 [2565296] 1qWRcO-00AlLW-0O Completed QT=0.621s
Thanks again for your help.
All the best,
*Mackenzie*
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/
