DMARC check for incoming mail results on QUARANTINED mails for internal mails

[Cike76]

TITLE:

DMARC check for incoming mail results on QUARANTINED mails for internal mails​

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:

Plesk Onyx Version 17.5.3 Update #5 on Centos 6.9 ( VPS )​

PROBLEM DESCRIPTION:

Internal mails between same domain and others internally gets dismissed using DMARC check incoming mail feature.
SPF and DKIM and DMARC working perfectly for external mail sending.
DMARC policy set to QUARANTINE​

STEPS TO REPRODUCE:

Plesk configured in outgoing mail mode to one IP
DMARC policy set to QUARANTINE
DKIM generated by PLESK
SPF record including +mx and IP (redundant but just for testing )
Tested using domains using Plesk as DNS others using external DNS ( both working perfectly without the DMARC check )​

ACTUAL RESULT:

May 13 14:40:27 mail postfix/smtpd[25716]: connect from unknown[xxx.xxx.xxx.xxx]

May 13 14:40:29 mail postfix/smtpd[25716]: 39BE486C1F8F: client=unknown[xxx.xxx.xxx.xxx], sasl_method=DIGEST-MD5, sasl_username=cike@xxxxxxxxx.xx

May 13 14:40:29 mail postfix/cleanup[25675]: 39BE486C1F8F: message-id=<00CFE5AA-9B0F-4EAE-8BC9-F7945706F3A7@xxxxxxxxx.xx>

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: handlers_stderr: PASS

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: PASS during call 'limit-out' handler

May 13 14:40:29 mail check-quota[27332]: Starting the check-quota filter...

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: handlers_stderr: SKIP

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: SKIP during call 'check-quota' handler

May 13 14:40:29 mail spf[27333]: Starting the spf filter...

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: handlers_stderr: SKIP

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: SKIP during call 'spf' handler

May 13 14:40:29 mail dk_sign[27334]: Starting the dk_sign filter...

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: handlers_stderr: PASS

May 13 14:40:29 mail /usr/lib64/plesk-9.0/psa-pc-remote[25598]: PASS during call 'dd51-domainkeys' handler

May 13 14:40:29 mail postfix/qmgr[25652]: 39BE486C1F8F: from=<cike@xxxxxxxxx.xx>, size=555, nrcpt=1 (queue active)

May 13 14:40:29 mail postfix-local[27335]: postfix-local: from=cike@xxxxxxxxx.xx, to=cike@xxxxxxxxx.xx, dirname=/var/qmail/mailnames

May 13 14:40:29 mail spamassassin[27336]: Starting the spamassassin filter...

May 13 14:40:29 mail spamd[3282]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46036

May 13 14:40:29 mail spamd[3282]: spamd: using default config for cike@xxxxxxxxx.xx: /var/qmail/mailnames/xxxxxxxxx.xx/cike/.spamassassin/user_prefs

May 13 14:40:29 mail spamd[3282]: spamd: processing message <00CFE5AA-9B0F-4EAE-8BC9-F7945706F3A7@xxxxxxxxx.xx> for cike@xxxxxxxxx.xx:30

May 13 14:40:30 mail spamd[3282]: spamd: clean message (-3.0/7.0) for cike@xxxxxxxxx.xx:30 in 0.7 seconds, 1032 bytes.

May 13 14:40:30 mail spamd[3282]: spamd: result: . -2 - ALL_TRUSTED,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,URIBL_BLOCKED scantime=0.7,size=1032,user=cike@xxxxxxxxx.xx,uid=30,required_score=7.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=46036,mid=<00CFE5AA-9B0F-4EAE-8BC9-F7945706F3A7@xxxxxxxxx.xx>,bayes=0.000000,autolearn=ham

May 13 14:40:30 mail dmarc[27342]: Starting the dmarc filter...

May 13 14:40:30 mail dmarc[27342]: SPF record was not found in Authentication-Results:

May 13 14:40:30 mail dmarc[27342]: DKIM record was not found in Authentication-Results:

May 13 14:40:30 mail spamd[11561]: prefork: child states: II

May 13 14:40:30 mail dovecot: service=lda, user=cike@xxxxxxxxx.xx, ip=[]. msgid=<00CFE5AA-9B0F-4EAE-8BC9-F7945706F3A7@xxxxxxxxx.xx>: saved mail to INBOX.Spam

May 13 14:40:30 mail dmarc[27342]: DMARC: message moved to QUARANTINE for cike@xxxxxxxxx.xx

May 13 14:40:30 mail postfix-local[27335]: message discarded by a mail handler

May 13 14:40:30 mail postfix/pipe[25726]: 39BE486C1F8F: to=<cike@xxxxxxxxx.xx>, relay=plesk_virtual, delay=1.7, delays=0.56/0/0/1.1, dsn=2.0.0, status=sent (delivered via plesk_virtual service)

May 13 14:40:30 mail postfix/qmgr[25652]: 39BE486C1F8F: removed​

EXPECTED RESULT:

Working internal mails using policy Quarantine​

ANY ADDITIONAL INFORMATION:

​

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:

Confirm bug​

 

[UFHH01]

Hi Cike76,

as I personally can't confirm the "bug report", you should consider to step out of anonymity and provide the FQDN - details and it's corresponding DNS - entries for further investigations.

 

[Cike76]

Of course, I´ll give you two examples of domains:

cike.ws ( this one has external DNS pointing to the plesk server, DMARC, DKIM and SPF keys and settings on place)
mexicomm.com.mx ( DNS provided by Plesk server, DMARC, DKIM and SPF keys and settings on place )

Both working perfectly with DKIM checks and SPF checks without DMARC checking.

 

[Cike76]

Still getting this extrange behaviour from my plesk.... without DMARC filtering... everything works as expected.... with DMARC filtering on getting

May 31 01:57:22 mail dmarc[31180]: Starting the dmarc filter...

May 31 01:57:22 mail dmarc[31180]: SPF record was not found in Authentication-Results:

May 31 01:57:22 mail dmarc[31180]: DKIM record was not found in Authentication-Results:


However both registers are in place...


Any ideas on this?

 

[IgorG]

I would suggest you contact Plesk Support Team with this issue.

 

[Cike76]

I would suggest you contact Plesk Support Team with this issue.

Thanks IgorG, I´ve already contacted them... to check this.

Awesome work on the forums IgorG!

 

[Cike76]

Just to keep you in the loop... The developer team is investigating this... seems to be a bug...

 

[danielsausm]

any news?

i may have same problem - some mails get two dkim lines

Authentication-Results: xxx-it.de;
dmarc=fail (p=QUARANTINE sp=QUARANTINE) d=xxx.de; header.from=googlemail.com;
dkim=pass header.i=SRS0=3CJc=7R=googlemail.com=xx.xxx@i-c-m-mannheim.de;
dmarc=pass (p=QUARANTINE sp=QUARANTINE) d=googlemail.com;
header.from=googlemail.com;

and this causes (weired) pesk to move the mails to .SPAM Folder - even when the account has set spamfiltering to - just mark, dont move...

 

[danielsausm]

this may is the cause...

marc[10143]: segfault at 1 ip 00007faa90d85c9c sp 00007ffc81a7d130 error 4 in libc-2.12.so[7faa90d3e000+18a000]
dmarc[26914]: segfault at 1 ip 00007f3a7b062c9c sp 00007ffdca4146a0 error 4 in libc-2.12.so[7f3a7b01b000+18a000]
dmarc[26932]: segfault at 1 ip 00007f16d335ac9c sp 00007ffe0f92d160 error 4 in libc-2.12.so[7f16d3313000+18a000]
dmarc[27037]: segfault at 1 ip 00007f11bb897c9c sp 00007ffd13f62bc0 error 4 in libc-2.12.so[7f11bb850000+18a000]
dmarc[27056]: segfault at 1 ip 00007f2490cc5c9c sp 00007ffdc2c57cf0 error 4 in libc-2.12.so[7f2490c7e000+18a000]
dmarc[25125]: segfault at 1 ip 00007f4faf837c9c sp 00007ffdd5ddfac0 error 4 in libc-2.12.so[7f4faf7f0000+18a000]
dmarc[2531]: segfault at 1 ip 00007fcc2ee6cc9c sp 00007fff920ff550 error 4 in libc-2.12.so[7fcc2ee25000+18a000]
dmarc[31244]: segfault at 1 ip 00007f7f47b35c9c sp 00007ffd85de8530 error 4 in libc-2.12.so[7f7f47aee000+18a000]
dmarc[31262]: segfault at 1 ip 00007f6cdd318c9c sp 00007ffcb9b44c30 error 4 in libc-2.12.so[7f6cdd2d1000+18a000]
dmarc[6057]: segfault at 1 ip 00007f9337aafc9c sp 00007ffeb92f4630 error 4 in libc-2.12.so[7f9337a68000+18a000]
dmarc[18708]: segfault at 1 ip 00007fa3f79f1c9c sp 00007ffe5479b930 error 4 in libc-2.12.so[7fa3f79aa000+18a000]
dmarc[18714]: segfault at 1 ip 00007f568f139c9c sp 00007ffc8f19ddf0 error 4 in libc-2.12.so[7f568f0f2000+18a000]
dmarc[24091]: segfault at 1 ip 00007f6756e95c9c sp 00007fffcb2c3c10 error 4 in libc-2.12.so[7f6756e4e000+18a000]
dmarc[24242]: segfault at 1 ip 00007f2e45fcac9c sp 00007ffd16a5dab0 error 4 in libc-2.12.so[7f2e45f83000+18a000]
dmarc[19354]: segfault at 1 ip 00007f9f8efe5c9c sp 00007ffdeb20d370 error 4 in libc-2.12.so[7f9f8ef9e000+18a000]
dmarc[13039]: segfault at 1 ip 00007f9daa9f9c9c sp 00007fffcb1804d0 error 4 in libc-2.12.so[7f9daa9b2000+18a000]
dmarc[21324]: segfault at 1 ip 00007f1cd6c43c9c sp 00007ffe033e8050 error 4 in libc-2.12.so[7f1cd6bfc000+18a000]
dmarc[21329]: segfault at 1 ip 00007f406932bc9c sp 00007ffc83aee4c0 error 4 in libc-2.12.so[7f40692e4000+18a000]
dmarc[26040]: segfault at 1 ip 00007f1ad8619c9c sp 00007ffd34eb3890 error 4 in libc-2.12.so[7f1ad85d2000+18a000]
dmarc[27674]: segfault at 1 ip 00007f65fbc5ec9c sp 00007fff34e89e60 error 4 in libc-2.12.so[7f65fbc17000+18a000]
dmarc[9796]: segfault at 1 ip 00007fe4d27b2c9c sp 00007fff3d10edc0 error 4 in libc-2.12.so[7fe4d276b000+18a000]
dmarc[27643]: segfault at 1 ip 00007fc8c9b07c9c sp 00007fffa79ce8c0 error 4 in libc-2.12.so[7fc8c9ac0000+18a000]
dmarc[29004]: segfault at 1 ip 00007f3ff34f0c9c sp 00007ffefdf40150 error 4 in libc-2.12.so[7f3ff34a9000+18a000]
dmarc[5007]: segfault at 1 ip 00007f4a3b239c9c sp 00007fff9a3c0110 error 4 in libc-2.12.so[7f4a3b1f2000+18a000]
dmarc[15178]: segfault at 1 ip 00007f6f8fbaec9c sp 00007ffe27dbb9d0 error 4 in libc-2.12.so[7f6f8fb67000+18a000]
dmarc[15051]: segfault at 1 ip 00007fc61ea67c9c sp 00007ffd29601750 error 4 in libc-2.12.so[7fc61ea20000+18a000]
dmarc[1119]: segfault at 1 ip 00007f4e0fe3bc9c sp 00007ffcdd59b920 error 4 in libc-2.12.so[7f4e0fdf4000+18a000]
dmarc[1134]: segfault at 1 ip 00007f3ac0553c9c sp 00007ffdb719d2f0 error 4 in libc-2.12.so[7f3ac050c000+18a000]
dmarc[19355]: segfault at 1 ip 00007fdbe7e3ec9c sp 00007ffc05142a20 error 4 in libc-2.12.so[7fdbe7df7000+18a000]
dmarc[15779]: segfault at 1 ip 00007f81dfee4c9c sp 00007ffea7c32c30 error 4 in libc-2.12.so[7f81dfe9d000+18a000]
dmarc[15830]: segfault at 1 ip 00007fc1dbfbec9c sp 00007ffea9d933d0 error 4 in libc-2.12.so[7fc1dbf77000+18a000]
dmarc[15841]: segfault at 1 ip 00007f11369d9c9c sp 00007ffd3c7b13e0 error 4 in libc-2.12.so[7f1136992000+18a000]
dmarc[15860]: segfault at 1 ip 00007f8d93910c9c sp 00007ffe4efdb750 error 4 in libc-2.12.so[7f8d938c9000+18a000]
dmarc[16747]: segfault at 1 ip 00007ff6cd574c9c sp 00007fff968c52b0 error 4 in libc-2.12.so[7ff6cd52d000+18a000]
dmarc[16767]: segfault at 1 ip 00007f48a1569c9c sp 00007ffcf4f03f10 error 4 in libc-2.12.so[7f48a1522000+18a000]
dmarc[17101]: segfault at 1 ip 00007fe282bdbc9c sp 00007ffe4e8e2950 error 4 in libc-2.12.so[7fe282b94000+18a000]
dmarc[17112]: segfault at 1 ip 00007fe6c2721c9c sp 00007ffca3f21bf0 error 4 in libc-2.12.so[7fe6c26da000+18a000]
dmarc[1401]: segfault at 1 ip 00007f1d00cefc9c sp 00007ffd6aaeca90 error 4 in libc-2.12.so[7f1d00ca8000+18a000]
dmarc[1584]: segfault at 1 ip 00007f1feea2fc9c sp 00007fff8d54d0c0 error 4 in libc-2.12.so[7f1fee9e8000+18a000]
dmarc[1806]: segfault at 1 ip 00007f43b26d6c9c sp 00007ffd88569750 error 4 in libc-2.12.so[7f43b268f000+18a000]
dmarc[4520]: segfault at 1 ip 00007f44668cec9c sp 00007ffc605ed670 error 4 in libc-2.12.so[7f4466887000+18a000]
dmarc[7933]: segfault at 1 ip 00007f03ee5e2c9c sp 00007ffe461fde40 error 4 in libc-2.12.so[7f03ee59b000+18a000]
dmarc[8087]: segfault at 1 ip 00007fa81398fc9c sp 00007ffd853c79f0 error 4 in libc-2.12.so[7fa813948000+18a000]
dmarc[8827]: segfault at 1 ip 00007fed4030fc9c sp 00007ffc7fd4c7a0 error 4 in libc-2.12.so[7fed402c8000+18a000]
dmarc[19049]: segfault at 1 ip 00007f60cbebac9c sp 00007ffd21d21f40 error 4 in libc-2.12.so[7f60cbe73000+18a000]
dmarc[19121]: segfault at 1 ip 00007f2e4af05c9c sp 00007ffffc188800 error 4 in libc-2.12.so[7f2e4aebe000+18a000]
dmarc[20771]: segfault at 1 ip 00007f008ac31c9c sp 00007ffd4fc77c80 error 4 in libc-2.12.so[7f008abea000+18a000]
dmarc[20788]: segfault at 1 ip 00007f95613e4c9c sp 00007ffcbf3c50d0 error 4 in libc-2.12.so[7f956139d000+18a000]
dmarc[30781]: segfault at 1 ip 00007fb532e62c9c sp 00007fff7da5a780 error 4 in libc-2.12.so[7fb532e1b000+18a000]
dmarc[30927]: segfault at 1 ip 00007f986fb4fc9c sp 00007fff4fa50330 error 4 in libc-2.12.so[7f986fb08000+18a000]
dmarc[6767]: segfault at 1 ip 00007f96e8e71c9c sp 00007ffc4d6d52c0 error 4 in libc-2.12.so[7f96e8e2a000+18a000]
dmarc[13432]: segfault at 1 ip 00007f4b8f6d2c9c sp 00007ffc51a3e6e0 error 4 in libc-2.12.so[7f4b8f68b000+18a000]
dmarc[13447]: segfault at 1 ip 00007fb617d4dc9c sp 00007ffc8bb24bd0 error 4 in libc-2.12.so[7fb617d06000+18a000]
dmarc[14665]: segfault at 1 ip 00007fe638aa1c9c sp 00007ffe81358060 error 4 in libc-2.12.so[7fe638a5a000+18a000]
dmarc[17177]: segfault at 1 ip 00007f20f61f5c9c sp 00007ffe66972780 error 4 in libc-2.12.so[7f20f61ae000+18a000]
dmarc[17183]: segfault at 1 ip 00007f72c239fc9c sp 00007ffe0ab6dd10 error 4 in libc-2.12.so[7f72c2358000+18a000]
dmarc[19054]: segfault at 1 ip 00007fdc03f3ec9c sp 00007ffe6fe54280 error 4 in libc-2.12.so[7fdc03ef7000+18a000]
dmarc[26625]: segfault at 1 ip 00007f5b4197dc9c sp 00007ffd863a4680 error 4 in libc-2.12.so[7f5b41936000+18a000]
dmarc[26626]: segfault at 1 ip 00007fb36c309c9c sp 00007ffc6f9fc1a0 error 4 in libc-2.12.so[7fb36c2c2000+18a000]

dmarc[28074]: segfault at 1 ip 00007f13e671cc9c sp 00007ffd6d9babe0 error 4 in libc-2.12.so[7f13e66d5000+18a000]
dmarc[3442]: segfault at 1 ip 00007fa12ff63c9c sp 00007ffff1497030 error 4 in libc-2.12.so[7fa12ff1c000+18a000]
dmarc[3675]: segfault at 1 ip 00007ff7ae509c9c sp 00007ffc9ad1b100 error 4 in libc-2.12.so[7ff7ae4c2000+18a000]
dmarc[7302]: segfault at 1 ip 00007fbbf7d25c9c sp 00007ffdf0d29270 error 4 in libc-2.12.so[7fbbf7cde000+18a000]
dmarc[13718]: segfault at 1 ip 00007fbf00b36c9c sp 00007ffd6d619670 error 4 in libc-2.12.so[7fbf00aef000+18a000]
dmarc[18485]: segfault at 1 ip 00007fca75d15c9c sp 00007ffe90fd1d20 error 4 in libc-2.12.so[7fca75cce000+18a000]
dmarc[21645]: segfault at 1 ip 00007fdfc5844c9c sp 00007ffe1091e0d0 error 4 in libc-2.12.so[7fdfc57fd000+18a000]
dmarc[30186]: segfault at 1 ip 00007ffbf5e82c9c sp 00007ffff9606050 error 4 in libc-2.12.so[7ffbf5e3b000+18a000]
dmarc[30213]: segfault at 1 ip 00007f651a6d8c9c sp 00007ffe4b900150 error 4 in libc-2.12.so[7f651a691000+18a000]
dmarc[30366]: segfault at 1 ip 00007f1c11d24c9c sp 00007ffca0829ab0 error 4 in libc-2.12.so[7f1c11cdd000+18a000]
dmarc[30383]: segfault at 1 ip 00007f9994e27c9c sp 00007fffd443b950 error 4 in libc-2.12.so[7f9994de0000+18a000]
dmarc[8900]: segfault at 1 ip 00007f5c67b30c9c sp 00007ffc1e3c3380 error 4 in libc-2.12.so[7f5c67ae9000+18a000]
dmarc[8917]: segfault at 1 ip 00007f53b2db5c9c sp 00007ffd47aa2410 error 4 in libc-2.12.so[7f53b2d6e000+18a000]
dmarc[8961]: segfault at 1 ip 00007fd18c9dec9c sp 00007ffc1be342e0 error 4 in libc-2.12.so[7fd18c997000+18a000]
dmarc[8978]: segfault at 1 ip 00007f7db7853c9c sp 00007ffe579cc900 error 4 in libc-2.12.so[7f7db780c000+18a000]
dmarc[23596]: segfault at 1 ip 00007f96189a8c9c sp 00007ffd885f7850 error 4 in libc-2.12.so[7f9618961000+18a000]
dmarc[4471]: segfault at 1 ip 00007f220af14c9c sp 00007ffe36aebc60 error 4 in libc-2.12.so[7f220aecd000+18a000]
dmarc[10813]: segfault at 1 ip 00007f52f68d2c9c sp 00007fff03d65a20 error 4 in libc-2.12.so[7f52f688b000+18a000]
dmarc[10868]: segfault at 1 ip 00007f2845cc6c9c sp 00007fff9714e470 error 4 in libc-2.12.so[7f2845c7f000+18a000]
dmarc[10927]: segfault at 1 ip 00007f9ed9770c9c sp 00007ffd00df6770 error 4 in libc-2.12.so[7f9ed9729000+18a000]
dmarc[10946]: segfault at 1 ip 00007f7180330c9c sp 00007ffeb92aaa70 error 4 in libc-2.12.so[7f71802e9000+18a000]
dmarc[11950]: segfault at 1 ip 00007f13963e5c9c sp 00007ffd346b4df0 error 4 in libc-2.12.so[7f139639e000+18a000]
dmarc[13503]: segfault at 1 ip 00007f0dfa512c9c sp 00007ffc6e9fe9d0 error 4 in libc-2.12.so[7f0dfa4cb000+18a000]
dmarc[13521]: segfault at 1 ip 00007f2bc6366c9c sp 00007ffc16eed770 error 4 in libc-2.12.so[7f2bc631f000+18a000]
dmarc[13883]: segfault at 1 ip 00007f10e8068c9c sp 00007ffe8eac5f60 error 4 in libc-2.12.so[7f10e8021000+18a000]
dmarc[13889]: segfault at 1 ip 00007fa57d6c4c9c sp 00007ffc49fb6fb0 error 4 in libc-2.12.so[7fa57d67d000+18a000]
dmarc[24146]: segfault at 1 ip 00007fb5266e8c9c sp 00007fff387ab820 error 4 in libc-2.12.so[7fb5266a1000+18a000]
dmarc[2640]: segfault at 1 ip 00007f579e0f1c9c sp 00007ffefba1cd80 error 4 in libc-2.12.so[7f579e0aa000+18a000]

 

[UFHH01]

Hi danielsausm,

unfortunately, you didn't include ( necessary ) informations about YOUR operating system and did you consider to update/upgrade to the latest Plesk version Plesk Onyx 17.5.3 Update 21 ?

 

[danielsausm]

Betriebssystem ‪CentOS 6.9 (Final)‬
Produkt Plesk Onyx
Version 17.5.3 Update #21

 

[danielsausm]

I startet a new Thread - its moved to dev