• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue DMARC REJECT after forwarding

F

Flachzange

Basic Pleskian
Dear community,

I did some experiments with SPF/DKIM/DMARC and it seemed to work in general, but now and then I get a few DMARC REJECTs in my mail log for incoming emails, although the sender is assumed to be correct. A few spot checks on the senders' DNS settings confirmed by assumption. Many rejects had in common that the email was previously being forwarded (either externally or internally).

What happens:
  1. I get an email for info@ruegen-urlaub.com by a valid sender
  2. SPF/DKIM/DMARC results are positive in terms of email is accepted. DMARC result is PASS.
  3. All emails for info@ruegen-urlaub.com are forwarded to post@annegret-evers.de. (Both domains are hosted by the same plesk instance)
  4. SRS rewriting scheme seems to be in place
  5. This time only the DKIM and DMARC checks seem to be done for post@annegret-evers.de. (SPF is missing from the log)
  6. The DMARC check is negative and the message is discarded without any further explanation.

Any idea why the DMARC check fails and the message is being discarded? Is there a way to enable some kind of debug logging for the DMARC check to see what exactly is causing the issue?

Thank you.

Jul 16 06:51:30 rs000326 postfix/smtpd[382]: connect from pmta40066.emarsys.net[91.211.240.66]
Jul 16 06:51:30 rs000326 postfix/smtpd[382]: 2A4C75C13B5: client=pmta40066.emarsys.net[91.211.240.66]
Jul 16 06:51:30 rs000326 greylisting filter[391]: Starting greylisting filter...
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: handlers_stderr: SKIP
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: SKIP during call 'grey' handler
Jul 16 06:51:30 rs000326 postfix/cleanup[385]: 2A4C75C13B5: message-id=<0.0.11.62.1D2FDEDCAAECE3E.0@pmta40066.emarsys.net>
Jul 16 06:51:30 rs000326 check-quota[392]: Starting the check-quota filter...
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: handlers_stderr: SKIP
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: SKIP during call 'check-quota' handler
Jul 16 06:51:30 rs000326 spf[394]: Starting the spf filter...
Jul 16 06:51:30 rs000326 spf[394]: SPF result: pass
Jul 16 06:51:30 rs000326 spf[394]: SPF status: PASS
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: handlers_stderr: PASS
Jul 16 06:51:30 rs000326 /usr/lib/plesk-9.0/psa-pc-remote[8003]: PASS during call 'spf' handler
Jul 16 06:51:30 rs000326 postfix/qmgr[8049]: 2A4C75C13B5: from=<e3-33351505922-191960II125864II6@rp.limango.de>, size=297081, nrcpt=1 (queue active)
Jul 16 06:51:30 rs000326 postfix-local[396]: postfix-local: from=e3-33351505922-191960II125864II6@rp.limango.de, to=info@ruegen-urlaub.com, dirname=/var/qmail/mailnames
Jul 16 06:51:30 rs000326 dk_check[397]: Starting the dk_check filter...
Jul 16 06:51:30 rs000326 dk_check[397]: DKIM verify result: DKIM verification (d=limango.de, 1024-bit key) succeeded
Jul 16 06:51:30 rs000326 dmarc[398]: Starting the dmarc filter...
Jul 16 06:51:30 rs000326 dmarc[398]: DMARC: PASS message for info@ruegen-urlaub.com
Jul 16 06:51:30 rs000326 check-quota[402]: Starting the check-quota filter...
Jul 16 06:51:30 rs000326 plesk sendmail[401]: handlers_stderr: SKIP
Jul 16 06:51:30 rs000326 plesk sendmail[401]: SKIP during call 'check-quota' handler
Jul 16 06:51:30 rs000326 postfix/smtpd[382]: disconnect from pmta40066.emarsys.net[91.211.240.66] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
Jul 16 06:51:30 rs000326 postfix/pickup[9348]: 981735C13B7: uid=30 from=<SRS0=nZzl=6T=rp.limango.de=e3-33351505922-191960II125864II6@ruegen-urlaub.com>
Jul 16 06:51:30 rs000326 postfix/cleanup[385]: 981735C13B7: message-id=<0.0.11.62.1D2FDEDCAAECE3E.0@pmta40066.emarsys.net>
Jul 16 06:51:30 rs000326 postfix/pipe[395]: 2A4C75C13B5: to=<info@ruegen-urlaub.com>, orig_to=<info@lobbersee.de>, relay=plesk_virtual, delay=0.47, delays=0.41/0.01/0/0.06, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Jul 16 06:51:30 rs000326 postfix/qmgr[8049]: 2A4C75C13B5: removed
Jul 16 06:51:30 rs000326 postfix/qmgr[8049]: 981735C13B7: from=<SRS0=nZzl=6T=rp.limango.de=e3-33351505922-191960II125864II6@ruegen-urlaub.com>, size=297795, nrcpt=1 (queue active)
Jul 16 06:51:30 rs000326 postfix-local[407]: postfix-local: from=SRS0=nZzl=6T=rp.limango.de=e3-33351505922-191960II125864II6@ruegen-urlaub.com, to=post@annegret-evers.de, dirname=/var/qmail/mailnames
Jul 16 06:51:30 rs000326 spamassassin[408]: Starting the spamassassin filter...
Jul 16 06:51:30 rs000326 spamd[4099]: spamd: connection from localhost [::1]:35680 to port 783, fd 5
Jul 16 06:51:30 rs000326 spamd[4099]: spamd: using default config for post@annegret-evers.de: /var/qmail/mailnames/annegret-evers.de/post/.spamassassin/user_prefs
Jul 16 06:51:30 rs000326 spamd[4099]: spamd: processing message <0.0.11.62.1D2FDEDCAAECE3E.0@pmta40066.emarsys.net> for post@annegret-evers.de:30
Jul 16 06:51:31 rs000326 spamd[4099]: spamd: clean message (-0.8/5.0) for post@annegret-evers.de:30 in 1.3 seconds, 292915 bytes.
Jul 16 06:51:31 rs000326 spamd[4099]: spamd: result: . 0 - BAYES_00,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,MPART_ALT_DIFF_COUNT,RCVD_IN_DNSWL_NONE,T_DKIM_INVALID scantime=1.3,size=292915,user=post@annegret-evers.de,uid=30,required_score=5.0,rhost=localhost,raddr=::1,rport=35680,mid=<0.0.11.62.1D2FDEDCAAECE3E.0@pmta40066.emarsys.net>,bayes=0.000000,autolearn=no autolearn_force=no
Jul 16 06:51:31 rs000326 dk_check[410]: Starting the dk_check filter...
Jul 16 06:51:31 rs000326 dk_check[410]: DKIM verify result: DKIM verification (d=limango.de, 1024-bit key) succeeded
Jul 16 06:51:31 rs000326 dmarc[411]: Starting the dmarc filter...
Jul 16 06:51:31 rs000326 dmarc[411]: DMARC: REJECT message for post@annegret-evers.de
Jul 16 06:51:31 rs000326 postfix-local[407]: message discarded by a mail handler
Jul 16 06:51:31 rs000326 postfix/pipe[395]: 981735C13B7: to=<post@annegret-evers.de>, orig_to=<mail@annegret-evers.de>, relay=plesk_virtual, delay=1.3, delays=0.01/0/0/1.3, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Jul 16 06:51:31 rs000326 postfix/qmgr[8049]: 981735C13B7: removed
Jul 16 06:51:31 rs000326 spamd[18012]: prefork: child states: II
Click to expand...
 
Thanks for pointing that out.

Unfortunately this issue has not been fixed, or at least I can observe the exact same behaviour as described above. I cannot use the DMARC feature right now (although I don't think I miss something)
 
You must log in or register to reply here.

Similar threads

Erwin Fiten
Question Spam sent from my server by other hosts ???
Replies
4
Views
561
Bitpalast
Bitpalast
ilogus
Resolved Incoming email DKIM issue
Replies
4
Views
564
ilogus
ilogus
TorbHo
Resolved Lots of DKIM/DMARC errors - mails are rejected
Replies
5
Views
447
TorbHo
TorbHo
W
Issue Mail forwarded on the server in the target mailbox is delivered to the SPAM folder
Replies
0
Views
498
W4ru
W
D
Issue Spoofed Emails Appearing as Sent from My Own Server Despite Correct SPF/DKIM/DMARC Configuration?
Replies
2
Views
2K
drdna
D
Back
Top