<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi Peter<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have noticed that DMARC fails from every <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a> posting. At first I thought I had misconfigured something, but now I think that ARC sealing before distribution to the user list would fix the problem. The emails retain the originator email address, and then DKIM and SPF checks
fails because DMARC sees it is delivered by ‘infra-01.ghettoforge.org’ instead of the originator policies. (Also BTW, .org which should probably also be .net so that any RDNS checks work too). Problem might be that openarc package for ARC signing is not available
in EPEL for EL10 just yet (but is available for EL8 & 9). It is not a difficult package to integrate.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My go by is that emails posted by <a href="mailto:postfix-users@postfix.org">
postfix-users@postfix.org</a> which uses a similar distribution philosophy to GF are ARC sealed and do not fail DMARC. Compare the headers below:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Received: from lists.ghettoforge.net (unknown [163.47.119.159])<o:p></o:p></p>
<p class="MsoNormal"> by mx01.integrilog.com (Postfix) with ESMTP id BCEFF304231E<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:michael.webb@integrilog.com">
michael.webb@integrilog.com</a>; Mon, 25 Aug 2025 03:25:58 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">DMARC-Filter: OpenDMARC Filter v1.4.2 mx01.integrilog.com BCEFF304231E<o:p></o:p></p>
<p class="MsoNormal">Authentication-Results: mx01.integrilog.com; dmarc=fail (p=reject dis=none) header.from=integrilog.com<o:p></o:p></p>
<p class="MsoNormal">Authentication-Results: mx01.integrilog.com; spf=tempfail smtp.mailfrom=lists.ghettoforge.net<o:p></o:p></p>
<p class="MsoNormal">Authentication-Results: mx01.integrilog.com; arc=none smtp.remote-ip=163.47.119.159<o:p></o:p></p>
<p class="MsoNormal">DKIM-Filter: OpenDKIM Filter v2.11.0 mx01.integrilog.com BCEFF304231E<o:p></o:p></p>
<p class="MsoNormal">Received: from infra-01.ghettoforge.org (localhost.localdomain [127.0.0.1])<o:p></o:p></p>
<p class="MsoNormal"> by lists.ghettoforge.net (Postfix) with ESMTP id 922DCD7BBD;<o:p></o:p></p>
<p class="MsoNormal"> Mon, 25 Aug 2025 02:25:55 -0700 (MST)<o:p></o:p></p>
<p class="MsoNormal">X-Original-To: <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a><o:p></o:p></p>
<p class="MsoNormal">Delivered-To: <a href="mailto:users@lists.ghettoforge.net">users@lists.ghettoforge.net</a><o:p></o:p></p>
<p class="MsoNormal">Received: from mx22.integrilog.com (mail.integrilog.com [161.184.52.51])<o:p></o:p></p>
<p class="MsoNormal"> by lists.ghettoforge.net (Postfix) with ESMTP id BA18CD7B49<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a>; Mon, 25 Aug 2025 02:25:52 -0700 (MST)<o:p></o:p></p>
<p class="MsoNormal">Received: from localhost (mx22.integrilog.com [127.0.0.1])<o:p></o:p></p>
<p class="MsoNormal"> by mx22.integrilog.com (Postfix) with ESMTP id 06F2D40368FC<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a>; Mon, 25 Aug 2025 03:25:50 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">X-Virus-Scanned: amavis at mx22.integrilog.com<o:p></o:p></p>
<p class="MsoNormal">Received: from mx22.integrilog.com ([127.0.0.1])<o:p></o:p></p>
<p class="MsoNormal"> by localhost (mx22.integrilog.com [127.0.0.1]) (amavis, port 10022)<o:p></o:p></p>
<p class="MsoNormal"> with ESMTP id mHTnLR7GsCk2 for <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a>;<o:p></o:p></p>
<p class="MsoNormal"> Mon, 25 Aug 2025 03:25:45 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com (autodiscover.integrilog.com [10.10.16.5])<o:p></o:p></p>
<p class="MsoNormal"> (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256<o:p></o:p></p>
<p class="MsoNormal"> bits)) (No client certificate requested)<o:p></o:p></p>
<p class="MsoNormal"> by mx22.integrilog.com (Postfix) with ESMTPS id 4715440368F8<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a>; Mon, 25 Aug 2025 03:25:45 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">DKIM-Filter: OpenDKIM Filter v2.11.0 mx22.integrilog.com 4715440368F8<o:p></o:p></p>
<p class="MsoNormal">DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=integrilog.com;<o:p></o:p></p>
<p class="MsoNormal"> s=key0001; t=1756113945;<o:p></o:p></p>
<p class="MsoNormal"> bh=ljofPk3NKaCXQJ6sPuKsYl7NyJyf6/9AljBATde6ooQ=;<o:p></o:p></p>
<p class="MsoNormal"> h=From:To:Subject:Date:References:In-Reply-To:From;<o:p></o:p></p>
<p class="MsoNormal"> b=zRcBp2o3aa10JXQK9sQ18k8oiODoWHV+Jk7HO/SklBLLZl0Y7nicm5hzpsGuqMa4W<o:p></o:p></p>
<p class="MsoNormal"> e7kwbG8A/Qn6P1b5gRj+TIbga7hPSa+afufECoa5CRZ+jdUHZxBM7ZUKXQzzvFCi6k<o:p></o:p></p>
<p class="MsoNormal"> R41acnqku9HLSU2homyfyYPof7WyWeFh27y4WtX1mxzbKva+Q7UlSAc/po601F5dPz<o:p></o:p></p>
<p class="MsoNormal"> IXIC+RjyJePh5X7+P7b2RPd/i+NhO7AcIebOLaXUYR9lyoSRnhjhMgo0hQ/scrRI7S<o:p></o:p></p>
<p class="MsoNormal"> QQZZDwza9EM4tiYMFX7SN8fo5YG1+1UqqZg4TcQL6jvhob7/LlepiZ9J8hSqYMvUs4<o:p></o:p></p>
<p class="MsoNormal"> t8hJGpq9c9G+Q==<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com (2620:cd:6000:110::5) by<o:p></o:p></p>
<p class="MsoNormal"> exs03.integrilog.com (2620:cd:6000:110::5) with Microsoft SMTP Server<o:p></o:p></p>
<p class="MsoNormal"> (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id<o:p></o:p></p>
<p class="MsoNormal"> 15.1.2507.57; Mon, 25 Aug 2025 03:25:40 -0600<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com ([10.10.18.5]) by exs03.integrilog.com<o:p></o:p></p>
<p class="MsoNormal"> ([10.10.18.5]) with mapi id 15.01.2507.057;<o:p></o:p></p>
<p class="MsoNormal"> Mon, 25 Aug 2025 03:25:40 -0600<o:p></o:p></p>
<p class="MsoNormal">From: Michael Webb <a href="mailto:michael.webb@integrilog.com">
michael.webb@integrilog.com</a><o:p></o:p></p>
<p class="MsoNormal">To: GhettoForge Users mailing list <a href="mailto:users@lists.ghettoforge.net">
users@lists.ghettoforge.net</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Received: from list.sys4.de (list.sys4.de [45.90.5.195])<o:p></o:p></p>
<p class="MsoNormal"> (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)<o:p></o:p></p>
<p class="MsoNormal"> key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)<o:p></o:p></p>
<p class="MsoNormal"> (No client certificate requested)<o:p></o:p></p>
<p class="MsoNormal"> by mx01.integrilog.com (Postfix) with ESMTPS id 4286730423CE<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:michael.webb@integrilog.com">
michael.webb@integrilog.com</a>; Wed, 30 Jul 2025 12:48:02 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">Received: from [10.0.2.100] (list01.sys4.de [89.58.25.70])<o:p></o:p></p>
<p class="MsoNormal"> by list01.sys4.de (Postfix) with ESMTP id 4bsh6T6TxxzPjlR;<o:p></o:p></p>
<p class="MsoNormal"> Wed, 30 Jul 2025 20:47:45 +0200 (CEST)<o:p></o:p></p>
<p class="MsoNormal">DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=postfix.org;<o:p></o:p></p>
<p class="MsoNormal"> s=20230217-rsa; t=1753901265;<o:p></o:p></p>
<p class="MsoNormal"> bh=elDB4IfubLaL7Z2IYe2miXAxOK8fD0xDx4EgUoKX/qg=;<o:p></o:p></p>
<p class="MsoNormal"> h=To:Date:MIME-Version:Subject:List-Id:List-Help:List-Owner:<o:p></o:p></p>
<p class="MsoNormal"> List-Post:List-Subscribe:List-Unsubscribe:From:Reply-To:<o:p></o:p></p>
<p class="MsoNormal"> Content-Type:Autocrypt:Cc:Content-Transfer-Encoding:Content-Type:<o:p></o:p></p>
<p class="MsoNormal"> Date:From:In-Reply-To:Mime-Version:Openpgp:References:Reply-To:<o:p></o:p></p>
<p class="MsoNormal"> Resent-To:Sender:Subject:To;<o:p></o:p></p>
<p class="MsoNormal"> b=jbpQ/OxXS2cQA20TgcvubhH/VkBkr5+/+VrvozF1WymSixZXobNdvh/IgYH/K8VEF<o:p></o:p></p>
<p class="MsoNormal"> okUiJ1EXQA2alGSR9h2CJQwj4jtFh5zPgOTdluNesgofMU83xOjiH8KINTTnpFjY1p<o:p></o:p></p>
<p class="MsoNormal"> S1rk8sCy5waHJsVej1HAEvRaVEZfrf85gqaxvZ4Xr9Q1EbHy++mGpKrhnVGzo/Is/o<o:p></o:p></p>
<p class="MsoNormal"> YqyxkuxRgoY7KsJhvyTN7Bm/MlR3+thBk+SxbDU+bXYvLvqrA+BnzByRfwBh+kRizr<o:p></o:p></p>
<p class="MsoNormal"> W8jl7jeehcbWeuPLNLCLLdZtmef1GxDEiYKtEe4ZLjTVXcmsK5EwOpucy2XMiTbtlb<o:p></o:p></p>
<p class="MsoNormal"> B0movGvWUuePw==<o:p></o:p></p>
<p class="MsoNormal">ARC-Seal: i=1; cv=none; a=rsa-sha256; d=list.sys4.de; s=2023032101;<o:p></o:p></p>
<p class="MsoNormal">t=1753901253;<o:p></o:p></p>
<p class="MsoNormal">b=agojSnL+2tTJk/vl0BrTlM213tVzMz1crNM1wmQTKRi4mX8uoien6+O5ImvZNSY1hOuMG<o:p></o:p></p>
<p class="MsoNormal">P97CnUqTjqb+CpFiOfQ0N1iCkpsXnCfvUiGhN0KnxZI0S+/HcIhktHIFWrzY9QJ2VJrZoHD<o:p></o:p></p>
<p class="MsoNormal">DZSxDkudE1j5QrV+Zu8638QYpiGyhbsLoReUCFUvxm6QmCZos0hg/AudGkm522k9SD/tFIk<o:p></o:p></p>
<p class="MsoNormal">3J2ABi8g/Xpp76ZpimW2thuhhNfGTB95XeCYH9oIin5hgROpc+4oWXYh0nZyzxFzZ5xw2Gb<o:p></o:p></p>
<p class="MsoNormal">UukvjholKwFX4fAbBEprUSZVB7z1mcGqSoff1cXl9kOlf5LjL0zyu+TDgQEg==<o:p></o:p></p>
<p class="MsoNormal">ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;<o:p></o:p></p>
<p class="MsoNormal">d=list.sys4.de; s=2023032101; t=1753901253; h=from : sender : reply-to<o:p></o:p></p>
<p class="MsoNormal">: subject : date : message-id : to : cc : mime-version : content-type<o:p></o:p></p>
<p class="MsoNormal">: content-transfer-encoding : content-id : content-description :<o:p></o:p></p>
<p class="MsoNormal">resent-date : resent-from : resent-sender : resent-to : resent-cc :<o:p></o:p></p>
<p class="MsoNormal">resent-message-id : in-reply-to : references : list-id : list-help :<o:p></o:p></p>
<p class="MsoNormal">list-unsubscribe : list-subscribe : list-post : list-owner :<o:p></o:p></p>
<p class="MsoNormal">list-archive; bh=elDB4IfubLaL7Z2IYe2miXAxOK8fD0xDx4EgUoKX/qg=;<o:p></o:p></p>
<p class="MsoNormal">b=tGJKonr9rCBuGv0PJ0pN7I/HFGAqUNeBqftQWQDlMAJXbBY4Qg4vJUhl6CuneDrp2uRR6<o:p></o:p></p>
<p class="MsoNormal">/tRK89jpGMnJCqf+f8VKcRlkppQHQmzxTpiJnEKnoe/CB55PlFH5LnkvkfQ6GB6Esywp9rl<o:p></o:p></p>
<p class="MsoNormal">zv8DEcjN9kBOxUL3jeIClf5QFgUVHMVV6PlUpS/ZpOgkdGw1tw6qXGggN09R5oTxhGHh5XO<o:p></o:p></p>
<p class="MsoNormal">20qQ9j81kdpvwEaGfhRXaGpVrwpjS4FY5e8HSoslHQwEpQKR3syjrJr5QDqIJzEbF1+c8IM<o:p></o:p></p>
<p class="MsoNormal">nQekg+XXt4RThsgg3uds9mnKkO9sD7aUV1nA36DvWMeympyrqvOXTJB3UT8w==<o:p></o:p></p>
<p class="MsoNormal">ARC-Authentication-Results: i=1; list.sys4.de;<o:p></o:p></p>
<p class="MsoNormal">dkim=pass header.d=integrilog.com;<o:p></o:p></p>
<p class="MsoNormal"> arc=none (Message is not ARC signed);<o:p></o:p></p>
<p class="MsoNormal"> dmarc=pass (Used From Domain Record) header.from=integrilog.com<o:p></o:p></p>
<p class="MsoNormal">policy.dmarc=reject<o:p></o:p></p>
<p class="MsoNormal">Authentication-Results: list.sys4.de; dkim=pass header.d=integrilog.com;<o:p></o:p></p>
<p class="MsoNormal">arc=none (Message is not ARC signed);<o:p></o:p></p>
<p class="MsoNormal">dmarc=pass (Used From Domain Record) header.from=integrilog.com<o:p></o:p></p>
<p class="MsoNormal">policy.dmarc=reject<o:p></o:p></p>
<p class="MsoNormal">Received: from mx02.integrilog.com (mail.integrilog.com [161.184.52.51])<o:p></o:p></p>
<p class="MsoNormal"> by list01.sys4.de (Postfix) with ESMTPS id 4bsh661xlCzPjhD<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:postfix-users@postfix.org">
postfix-users@postfix.org</a>; Wed, 30 Jul 2025 20:47:25 +0200 (CEST)<o:p></o:p></p>
<p class="MsoNormal">Received: from localhost (mx02.integrilog.com [127.0.0.1])<o:p></o:p></p>
<p class="MsoNormal"> by mx02.integrilog.com (Postfix) with ESMTP id C7F9B3041381<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:postfix-users@postfix.org">
postfix-users@postfix.org</a>; Wed, 30 Jul 2025 12:47:18 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">X-Virus-Scanned: amavis at mx02.integrilog.com<o:p></o:p></p>
<p class="MsoNormal">Received: from mx02.integrilog.com ([127.0.0.1])<o:p></o:p></p>
<p class="MsoNormal">by localhost (mx02.integrilog.com [127.0.0.1]) (amavis, port 10022)<o:p></o:p></p>
<p class="MsoNormal">with ESMTP id 92Fy9X_IwtbL for <a href="mailto:postfix-users@postfix.org">
postfix-users@postfix.org</a>;<o:p></o:p></p>
<p class="MsoNormal">Wed, 30 Jul 2025 12:47:01 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com (autodiscover.webbfamily.ca [10.10.16.5])<o:p></o:p></p>
<p class="MsoNormal"> (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))<o:p></o:p></p>
<p class="MsoNormal"> (No client certificate requested)<o:p></o:p></p>
<p class="MsoNormal"> by mx02.integrilog.com (Postfix) with ESMTPS id 3E6903041380<o:p></o:p></p>
<p class="MsoNormal"> for <a href="mailto:postfix-users@postfix.org">
postfix-users@postfix.org</a>; Wed, 30 Jul 2025 12:46:58 -0600 (MDT)<o:p></o:p></p>
<p class="MsoNormal">DKIM-Filter: OpenDKIM Filter v2.11.0 mx02.integrilog.com 3E6903041380<o:p></o:p></p>
<p class="MsoNormal">DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=integrilog.com;<o:p></o:p></p>
<p class="MsoNormal"> s=key0001; t=1753901219;<o:p></o:p></p>
<p class="MsoNormal"> bh=dfL7Zv84NO8dX8GFvWN/WPoBJDW25ohHhQZRnDt2DA0=;<o:p></o:p></p>
<p class="MsoNormal"> h=From:To:Subject:Date:From;<o:p></o:p></p>
<p class="MsoNormal"> b=bRGtbtXTuOvfosq7fzfXTkw587yM53Ai29Of+5Mtx2WVeOAHGgwf+UC1vU1yKF+3B<o:p></o:p></p>
<p class="MsoNormal"> PWTAaktYV6KLFGEpyz9RudAYhvYadDmBveFXBEjJxfbmUEQmTt1dNLA41F2W4I+vPj<o:p></o:p></p>
<p class="MsoNormal"> 972a+VmaH+TdvaIMKN4wGlg1KrwO4OjRkjhC08fJbnvfWlYF45B/NLVSJ0YnbyXv/l<o:p></o:p></p>
<p class="MsoNormal"> Rt2S3ACr4/jHA1jHnep5mVrmaITHePk9hRl5+wyI+2pqQjVUTgEqGr9HO75r13iHp4<o:p></o:p></p>
<p class="MsoNormal"> fPleS3ippScPHABStCbbCZY26wI0hCw4pDN3dVbOVATOa5HS+EGwy4LUaWblc+EJfA<o:p></o:p></p>
<p class="MsoNormal"> j2qFExxTNMEdQ==<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com (2620:cd:6000:110:8906:cf1:2c13:aa7c) by<o:p></o:p></p>
<p class="MsoNormal">exs03.integrilog.com (2620:cd:6000:110:8906:cf1:2c13:aa7c) with Microsoft<o:p></o:p></p>
<p class="MsoNormal">SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id<o:p></o:p></p>
<p class="MsoNormal">15.1.2507.39; Wed, 30 Jul 2025 12:46:50 -0600<o:p></o:p></p>
<p class="MsoNormal">Received: from exs03.integrilog.com ([10.10.18.5]) by exs03.integrilog.com<o:p></o:p></p>
<p class="MsoNormal">([10.10.18.5]) with mapi id 15.01.2507.039; Wed, 30 Jul 2025 12:46:50 -0600<o:p></o:p></p>
<p class="MsoNormal">To: <a href="mailto:postfix-users@postfix.org">postfix-users@postfix.org</a>
<a href="mailto:postfix-users@postfix.org">postfix-users@postfix.org</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike<o:p></o:p></p>
</div>
</body>
</html>