search

cloudflare / dmarc-email-worker

DMARC reports processor using Cloudflare Workers and Email Workers
https://blog.cloudflare.com/how-we-built-dmarc-management/
MIT License
95 stars 11 forks source link

Handling `temperror`? #10

Open Manouchehri opened 1 year ago

Manouchehri commented 1 year ago

I noticed Microsoft sends temperror sometimes; maybe we should show this in a different field, because it's a bit confusing to see <100% DKIM aligned, with 0 failures.

image

<?xml version="1.0"?>
<feedback xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <record>
    <row>
      <source_ip>23.249.208.3</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <envelope_to>hotmail.com</envelope_to>
      <envelope_from>ca-central-1.ses.ai.moda</envelope_from>
      <header_from>ai.moda</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>ai.moda</domain>
        <selector>kveakzv3jp7gwnr76k4pwvvzd7xlrzbl</selector>
        <result>temperror</result>
      </dkim>
      <dkim>
        <domain>amazonses.com</domain>
        <selector>qpcfy54xse57bzmyicqs5kisv46vyagl</selector>
        <result>pass</result>
      </dkim>
      <spf>
        <domain>ca-central-1.ses.ai.moda</domain>
        <scope>mfrom</scope>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
</feedback>
Manouchehri commented 7 months ago

Any update on this? We're still seeing this (temperror) happening at high ish levels (~1%) to Microsoft users, would be very convenient if I didn't have to read through XML files myself to find out what the issue was.