Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DMARC protection: "p" tag is not applied to subdomains #654

Closed
ikedas opened this issue Jun 13, 2019 · 0 comments · Fixed by #655
Closed

DMARC protection: "p" tag is not applied to subdomains #654

ikedas opened this issue Jun 13, 2019 · 0 comments · Fixed by #655
Labels
Milestone

Comments

@ikedas
Copy link
Member

ikedas commented Jun 13, 2019

Version

6.2.43b.2 or earlier.

Installation method

Any.

Expected behavior

If a domain example.org has these DNS RRs:

_dmarc.example.org.      IN TXT "v=DMARC1; p=reject"
_dmarc.sub.example.org.  IN TXT "v=DMARC1; p=quarantine"

mail receiver should interpret them as:

  • reject policy is applied to user@example.org.
  • quarantine policy is applied to user@sub.example.org.
  • reject policy is applied to other subdomains e.g. user@other.example.org.

And, sp tag should be supported along with p tag (See also RFC7489).

Actual behavior

Sympa's DMARC protection behaves as:

  • dmarc_reject option matches against user@example.org.
  • dmarc_quarantine option matches against user@sub.example.org.
  • However, neither of options above matches against othter subdomains e.g. user@other.example.org.

And, sp tag is never recognized.

@ikedas ikedas added the bug label Jun 13, 2019
@ikedas ikedas added this to the 6.2.46 milestone Jun 13, 2019
ikedas added a commit that referenced this issue Jun 26, 2019
DMARC protection: "p" tag is not applied to subdomains #654
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant