DKIM header does not comply with DMARC

Posted by Jacques Le Roux on Jun 24, 2017; 11:23am
URL: https://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-tp7598182.html

Hi,

I'm the admin of the Apache OFBiz Nabble forum: http://ofbiz.135035.n4.nabble.com/

Several projects of the Apache Software Foundation (ASF) are also using Nabble as free archives/forums. This is great and we thank you for that!

Recently an Apache OFBiz user, also a Comcast customer, found that he did not receive all messages from the Apache OFBiz user ML, though he is subscribed to this ML http://ofbiz.apache.org/mailing-lists.html

After an investigation with the ASF Infrastructure team, we discovered that this is due to the DMARC policy and DKIM signature check done by Comcast.

The point of DMARC is to validate the DKIM header emanating from the domain listed in the from address of the message headers.

The problem with what Nabble does is that you are setting a DKIM header using your own mailers domain, which differs from the domain in the from address.

So your DKIM header does not comply with DMARC, which is causing us some downstream delivery problems.

Could you check if you can handle this better?

If we not only consider ASF users, the number of Nabble users and the number of readers using Comcast must be a large group of people...

Thanks!