DKIM + DMARC with Contact Forms?

From: Steve Jenkins <steve_at_stevejenkins.com>
Date: Sun, 29 Dec 2013 16:54:07 -0700

We use a contact form on one of our websites (it's a custom PHP form we
created) to send feedback.

Here's one of the headers from a test message. Assume example1.com is my
personal email address where stuff gets forwarded to me.

Delivered-To: stevej_at_example1.com
Received: by 10.224.179.132 with SMTP id bq4csp124338qab;
        Sun, 29 Dec 2013 15:44:04 -0800 (PST)
X-Received: by 10.66.11.202 with SMTP id s10mr65932936pab.86.1388360644231;
        Sun, 29 Dec 2013 15:44:04 -0800 (PST)
Return-Path: <apache_at_luigi.cheatcodes.com>
Received: from paperboy.cheatcodes.com (paperboy.cheatcodes.com. [216.168.36.7])
        by mx.google.com with ESMTPS id yd9si31684848pab.118.2013.12.29.15.44.03
        for <multiple recipients>
        (version=TLSv1 cipher=RC4-SHA bits=128/128);
        Sun, 29 Dec 2013 15:44:04 -0800 (PST)
Received-SPF: pass (google.com: domain of apache_at_luigi.cheatcodes.com
designates 216.168.36.7 as permitted sender) client-ip=216.168.36.7;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of apache_at_luigi.cheatcodes.com
designates 216.168.36.7 as permitted sender)
smtp.mail=apache_at_luigi.cheatcodes.com;
       dkim=pass header.i=_at_cheatcodes.com;
       dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: by paperboy.cheatcodes.com (Postfix)
        id 84D03148070; Sun, 29 Dec 2013 15:44:03 -0800 (PST)
Delivered-To: steves_at_cheatcodes.com
Received: from luigi.cheatcodes.com (luigi.cheatcodes.com [216.168.36.5])
        by paperboy.cheatcodes.com (Postfix) with ESMTP id 748DB14806B
        for <stevej_at_cheatcodes.com>; Sun, 29 Dec 2013 15:44:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cheatcodes.com;
        s=default; t=1388360643;
        bh=QbxN+qTFB+eRv2jPcwI99Y+/ewdduB7gYHnfbNJ+1No=;
        h=Date:To:Subject:From:Reply-To;
        b=r+8EVTu9NXDEx5GJoRkuwiziDhdkm9ZZiANc85qqlWXtTOemxJyIF2GPSYPIR7Eao
         uBLM+xauoO065PuYhVwUP/lYadC1BLcI6zuMiYuMyB6YIaLM56x++iPoepyNBPF8tW
         AU1iyazkykh9B9jbZEASCSLtMWMHUJKFjZFfWMm0=
Received: from luigi.cheatcodes.com (localhost.localdomain [127.0.0.1])
        by luigi.cheatcodes.com (Postfix) with ESMTP id 0C8E29B00B8
        for <stevej_at_cheatcodes.com>; Sun, 29 Dec 2013 15:44:03 -0800 (PST)
Received: (from apache_at_localhost)
        by luigi.cheatcodes.com (8.13.8/8.13.8/Submit) id rBTNi39B009974;
        Sun, 29 Dec 2013 15:44:03 -0800
Date: Sun, 29 Dec 2013 15:44:03 -0800
Message-Id: <201312292344.rBTNi39B009974_at_luigi.cheatcodes.com>
To: steves_at_cheatcodes.com
Subject: [CheatCodes] Feedback from BLAH BLAH
X-PHP-Originating-Script: 0:contact_online.php
From: sender_at_gmail.com
Reply-To: sender_at_gmail.com


The From: and Reply-To: are based on what the user enters into the web
form, making it easy for us to simply reply to the incoming email.
However, we're seeing a dmarc=fail -- and I'm assuming it's because
the header.from=gmail.com. The spf=pass and dkim=pass (because
OpenDKIM signs anything leaving paperboy.cheatcodes.com), and I'm
under the false assumption that if either spf or dkim passes, that
meant a dmarc pass.

Any ideas on how we can configure so that we get a dmarc=pass?

Thx,

SteveJ
Received on Sun Dec 29 2013 - 23:54:22 PST

This archive was generated by hypermail 2.3.0 : Mon Dec 30 2013 - 00:00:02 PST