[exim] Re: dmarc_history_file - incomplete data logged for s…

Inizio della pagina
Delete this message
Reply to this message
Autore: Victor Ustugov
Data:  
To: Jeremy Harris via Exim-users
Oggetto: [exim] Re: dmarc_history_file - incomplete data logged for spf and dkim
Victor Ustugov via Exim-users wrote on 21.08.2023 2:56:
> Jeremy Harris via Exim-users wrote on 21.08.2023 2:33:
>> On 20/08/2023 23:45, Victor Ustugov via Exim-users wrote:
>>> I do not know what values should be specified if the email does not
>>> contains an ARC signature.
>>
>> Perhaps
>>   arc 11                       (ARES_RESULT_UNKNOWN)
>>   arc_policy 1 json:[]         (DMARC_ARC_POLICY_RESULT_UNUSED)
>>
>> guessing from the names.
> 
> This was my first guess. But when sending a DMARC Aggregate Report,
> these values are interpreted in the same way as ARES_RESULT_FAIL and
> DMARC_ARC_POLICY_RESULT_FAIL.
> 
> Here is the relevant snippet of the report:
> 
> 
>                 <reason>
>                     <type>local_policy</type>
>                     <comment>arc=fail</comment>
>                 </reason>



Jeremy, this is relevant piece of code from opendmarc-reports:


               switch ($arc)
               {
                       case 1  { $arcstr = "pass"; }
                       else    { $arcstr = "fail"; }
               }

               switch ($arcpolicy)
               {
                       case 0  { $arcpolicystr = "pass"; }
                       else    { $arcpolicystr = "fail"; }
               }


So, "arc" can only have two values - 1 ("pass") or any other ("fail").
And "arc_policy" can only have two values - 0 ("pass") or any other
("fail").


>> I wonder if there's a scheme for that JSON anywhere.  I can guess at
>> i, d and s - but what value for ip?
>
> In my opinion, "ip" matches smtp.remote-ip from
> ARC-Authentication-Results. header.
>
>
>> And is ip required in all "i"
>> entries,
>
> I think yes.
>
>
>> only one of them (which?), or fully optional?




--
Best wishes Victor Ustugov
mailto:victor@corvax.kiev.ua
public GnuPG/PGP key: https://victor.corvax.kiev.ua/corvax.asc

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/