[Mozilla Enterprise] ESR mailing list forwarding gives rise to DMARC "failures"

Sun Jul 14 19:58:29 UTC 2019

Here's another example of a DMARC "failure" when mail (from me) is
passed on to an ESR subscriber. This time the text of the "failure"
report includes more headers (see below).

Note that our SPF and DKIN both pass (ARC-Authentication-Results) when
they get to mx.google.com, but apparently antispamcloud.com looks at
the SPF and DKIM for us (iment.com), instead of the SPF & DKIM for
mail.mozilla.org. Is this something that Mozilla can remedy?

Or, if so many email providers can't deal with the behavior of the ESR
mailing list server, I don't know what to do except downgrade our DMARC
action from "Quarantine" (much less "Reject") back to "None" (which it
was until quite recently).

Any thoughts?

----

From: no-reply at mx74.antispamcloud.com
To: dmarc-actions at iment.com
Date: Sun, 14 Jul 2019 05:01:16 +0200
Subject: DMARC Forensic Report for iment.com from IP 63.245.210.104

A message claiming to be from you has failed the published DMARC
policy for your domain.

  Sender Domain: iment.com
  Sender IP Address: 63.245.210.104
  Received Date: Sun, 14 Jul 2019 05:01:16 +0200
  SPF Alignment: no
  DKIM Alignment: no
  DMARC Results: Quarantine

------ This is a copy of the headers that were received before the error
       was detected.

Received: from mail.mozilla.org ([63.245.210.104])
	by mx74.antispamcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.89)
	(envelope-from <enterprise-bounces at mozilla.org>)
	id 1hmUlH-000yii-PP
	for kkuo at asaging.org; Sun, 14 Jul 2019 05:01:15 +0200
Received: from mailman1.mail.mdc2.mozilla.com (localhost4.localdomain [127.0.0.1])
	by mailman1.mail.mdc2.mozilla.com (Postfix) with ESMTP id 0001C8A103;
	Sun, 14 Jul 2019 03:01:05 +0000 (UTC)
X-Original-To: enterprise at mozilla.org
Delivered-To: enterprise at mailman1.mail.mdc2.mozilla.com
Received: from mail-qk1-f198.google.com (mail-qk1-f198.google.com
 [209.85.222.198])
 by mailman1.mail.mdc2.mozilla.com (Postfix) with ESMTPS id 75CDE8A04F
 for <enterprise at mozilla.org>; Sun, 14 Jul 2019 00:26:42 +0000 (UTC)
Received: by mail-qk1-f198.google.com with SMTP id l14so10372014qke.16
 for <enterprise at mozilla.org>; Sat, 13 Jul 2019 17:26:42 -0700 (PDT)
X-Gm-Message-State: APjAAAXSS0+D1kB4Pz+66hRZ+UAY2JWci0r+kjF0lVQe5V7brC7UYEp0
 lSJgoCOb3Td9cVUliIoR7H6O7504qvc6uCsV/lZt/k+Hc72iyn08DM6upPuoSbnLiVv4cbm1jbz
 1lwwbJ3W+8PO8c91Yl1GKmA==
X-Received: by 2002:a05:620a:4c8:: with SMTP id
 8mr10916387qks.366.1563064002185; 
 Sat, 13 Jul 2019 17:26:42 -0700 (PDT)
X-Google-Smtp-Source: APXvYqyV3Py8Nn7udkiSOnYcKhlVJcDcdsKgA+Q8idHsQ1RWi1TGwG6yoENi+BHqNlJBRq1Ym3Yx
X-Received: by 2002:a05:620a:4c8:: with SMTP id
 8mr10916371qks.366.1563064001722; 
 Sat, 13 Jul 2019 17:26:41 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1563064001; cv=none;
 d=google.com; s=arc-20160816;
 b=equKAuAwOgU/rhJ2pRO2pOdTgfa1HjunEO8100dpUn+fPbHlbGKJQ2w1/YrEJDDqeD
 Xi7OhRXkPSVZefmx4GMd9kRQ3ZvJXH57evgLXhSkdw9ZuFtEhOXNu3607UlgNGzpQHlQ
 fPbK0q8xubI1R+Y/UMFqKSVBCRrqV+KcGzyOyGeS8C7rRfIQzLkM3zz86oqt17pG8im0
 IewwsjlWK5NWJkJi8IMpE+XlxG72HmEsP2+bvs/3M0paF8MzFsry+42wf/gi7dYbqtsn
 NQ5PGnHReCj0GWefjMXgyGHPRMawEzF6rImH/4ANCQOJ8OvTkSN4kV5gLcieAXB6Z+6o
 z8rQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
 s=arc-20160816; 
 h=content-transfer-encoding:mime-version:organization:message-id
 :subject:to:from:date:dkim-signature;
 bh=rq+adiFrnYxAYrPvyNL4EBtBanTM9sMKXLu1keI3uQo=;
 b=axtmPyxDqOBjBOsXMSdb9hRV8bYJNwpu3TTJP1dTLqAP5ommxGKnLdePuP3GVnvY6e
 ulJCWVX6pdyzY/luJY5K/Zb3wv2P5lTYx9X55n4lHNt+7vJebadr/gk4iHtqGJ916AQ/
 WkUWB7fI3p1x2o4IGbZYQdLYV6wbb9zH/tNfNy2HSPtKxxdZGofEdD7KhbVhbfmUsdWQ
 LsNOsM9BZ5QqZOQR5f53xZ9hwFNj6/hGwdqvUn2ctLs3Rv2X4wNZACPN3zMI+pX6rgLl
 baqM4RJ4/o6FTa4hjwdeZRpl26oz/Yt7/p/MNHpYTRpoUbnfq5eINM/yuANbcN2CgdeC
 kUAQ==
ARC-Authentication-Results: i=1; mx.google.com;
 dkim=pass (test mode) header.i=@iment.com header.s=1704a header.b=IrQecTlX;
 spf=pass (google.com: domain of mozilla at iment.com designates 216.55.100.245 as
 permitted sender) smtp.mailfrom=mozilla at iment.com; 
 dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=iment.com
Received: from iment0.iment.com (iment0.iment.com. [216.55.100.245])
 by mx.google.com with ESMTP id v5si8452843qtb.115.2019.07.13.17.26.41
 for <enterprise at mozilla.org>; Sat, 13 Jul 2019 17:26:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of mozilla at iment.com designates
 216.55.100.245 as permitted sender) client-ip=216.55.100.245; 
Authentication-Results: mx.google.com;
 dkim=pass (test mode) header.i=@iment.com header.s=1704a header.b=IrQecTlX;
 spf=pass (google.com: domain of mozilla at iment.com designates 216.55.100.245 as
 permitted sender) smtp.mailfrom=mozilla at iment.com; 
 dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=iment.com
Received: from imes.imemail.iment.com (imez.olm.iment.local [10.18.195.60])
 by iment0.iment.com (Postfix) with ESMTP id 0AFF8607948F
 for <enterprise at mozilla.org>; Sat, 13 Jul 2019 20:26:41 -0400 (EDT)
Received: by imes.imemail.iment.com (Postfix, from userid 77)
 id DFA8B3286864; Sat, 13 Jul 2019 20:26:40 -0400 (EDT)
X-IME-Tag: e938c010-1f22-f02c-9032-7b16525439d3-a8-f47acf
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iment.com; h=
 date:from:to:subject:message-id:mime-version:content-type
 :content-transfer-encoding; s=1704a; bh=rq+adiFrnYxAYrPvyNL4EBtB
 anTM9sMKXLu1keI3uQo=; b=IrQecTlXReW0zNUcha/R1OZLknxn9UbfPrfrVqK3
 RIxlAB9yhhg/k5O6e7F5PBgG61AKUCqk3lY3TcAHOJYfi3u/splVAzKTi/Z5lgtp
 ++e9EiuuCK6ju3eduDGxpukPHkPyU/9AM3LULdHaMgRJ7U4OjIFc78bIv1r5c164
 iRY=
Received: from ime1.iment.local [192.168.0.101]
 by imes.imemail.iment.com (Postfix) with ESMTP id B01BA3286834
 for <enterprise at mozilla.org>; Sat, 13 Jul 2019 20:26:40 -0400 (EDT)
Date: Sat, 13 Jul 2019 20:26:40 -0400
From: Paul Kosinski <mozilla at iment.com>
To: enterprise at mozilla.org
Message-ID: <20190713202640.52e146af at ime1.iment.local>
Organization: InterMedia Enterprises
X-Mailer: Claws Mail
Mime-Version: 1.0
X-Google-Passthru: mozilla.org
X-Gm-Spam: 1
X-Gm-Phishy: 0
Subject: [Mozilla Enterprise] ESR mailing list forwarding gives rise to
 DMARC "failures"
X-BeenThere: enterprise at mozilla.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: Enterprise Working Group Mailing List <enterprise.mozilla.org>
List-Unsubscribe: <https://mail.mozilla.org/options/enterprise>,
 <mailto:enterprise-request at mozilla.org?subject=unsubscribe>
List-Archive: <http://mail.mozilla.org/pipermail/enterprise/>
List-Post: <mailto:enterprise at mozilla.org>
List-Help: <mailto:enterprise-request at mozilla.org?subject=help>
List-Subscribe: <https://mail.mozilla.org/listinfo/enterprise>,
 <mailto:enterprise-request at mozilla.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: enterprise-bounces at mozilla.org
Sender: "Enterprise" <enterprise-bounces at mozilla.org>
Received-SPF: pass (mx74.antispamcloud.com: domain of mozilla.org designates 63.245.210.104 as permitted sender) client-ip=63.245.210.104; envelope-from=enterprise-bounces at mozilla.org; helo=mail.mozilla.org;
X-SPF-Result: mx74.antispamcloud.com: domain of mozilla.org designates 63.245.210.104 as permitted sender
X-DKIM-Status: none /  / mozilla.org /  /  / 
X-DKIM-Status: fail / signature_incorrect / iment.com / iment.com /  / 1704a