Incorrect OpenDMARC configuration causes mails to be silently discarded about docker HOT 4 CLOSED

Thanks for your feedback and yes this was fixed for Postfix (#67) and like you I think this should be fixed here too.

from docker.

While researching this a little more, I wonder if the current setup might be vulnerable to this: https://security.stackexchange.com/questions/204828/bypassing-opendmarc-checks-by-forging-authentication-results

While I saw OpenDMARC being configured to re-check SPF itself, I could not find the option AlwaysAddARHeader in OpenDKIM configuration which is also mentioned there.
I'm still new to this, so I might be misinterpreting things here...

from docker.

option AlwaysAddARHeader in OpenDKIM configuration

Don't think that's necessary in the case of AnonAddy. cc @willbrowningme

from docker.

@croxxx are you able to test if it is vulnerable with your current setup following the steps of the poster on stackexchange?

This is a great article on OpenDMARC and it does mention to include SPFSelfValidate true.

AnonAddy now uses Rspamd for checking DMARC policies.

from docker.