<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="en-CH" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We are parsing dmarc reports using parsedmarc and the forensics reports coming from antispamcloud.com seems not to follow the recommended reporting format (AFRF) and therefore are considered invalid.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Maybe is there anyone from SpamExperts in this list that could enlighten me about how we could request to receive the reports in a common format?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">If I understand correctly that should be the case by default:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://tools.ietf.org/html/rfc7489#section-7.3">https://tools.ietf.org/html/rfc7489#section-7.3</a><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt">When a Domain Owner requests failure reports for the purpose of<br>
forensic analysis, and the Mail Receiver is willing to provide such<br>
reports, the Mail Receiver generates and sends a message using the<br>
format described in [AFRF]; this document updates that reporting<br>
format, as described in Section 7.3.1.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://tools.ietf.org/html/rfc7489#section-6.3">https://tools.ietf.org/html/rfc7489#section-6.3</a><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">rf: Format to be used for message-specific failure reports (colon-<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> separated plain-text list of values; OPTIONAL; default is "afrf").<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> The value of this tag is a list of one or more report formats as<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> requested by the Domain Owner to be used when a message fails both<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> [SPF] and [DKIM] tests to report details of the individual<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> failure. The values MUST be present in the registry of reporting<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> formats defined in Section 11; a Mail Receiver observing a<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> different value SHOULD ignore it or MAY ignore the entire DMARC<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> record. For this version, only "afrf" (the auth-failure report<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> type defined in [AFRF]) is presently supported. See Section 7.3<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> for details. For interoperability, the Authentication Failure<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> Reporting Format (AFRF) MUST be supported.<o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Instead we receive it with this format:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt">A message claiming to be from you has failed the published DMARC<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">policy for your domain.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> Sender Domain: <span lang="EN-US">
xyz</span>.ch<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> Sender IP Address: <span lang="EN-US">
x.x.x.x<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"> Received Date: Fri, 04 Sep 2020 16:37:40 +0200<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> SPF Alignment: no<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> DKIM Alignment: no<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> DMARC Results: None, <span lang="EN-US">
Accept<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">------ This is a copy of the headers that were received before the error<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> was detected.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-US">[then all headers of the offending message here that I removed for this post]<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks a lot for your infos and help.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Kind regards,<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;color:#C00000;mso-fareast-language:#2000">Sébastien RICCIO</span></b><span lang="EN-US" style="color:black;mso-fareast-language:#2000"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;color:black;mso-fareast-language:#2000">SYSTEM ADMINISTRATOR</span></b><span lang="EN-US" style="color:black;mso-fareast-language:#2000"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:8.0pt;color:#C00000;mso-fareast-language:#2000">P</span></b><span lang="EN-US" style="font-size:8.0pt;color:black;mso-fareast-language:#2000"> +41 840 888 888<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:8.0pt;color:#C00000;mso-fareast-language:#2000">F</span></b><b><span lang="EN-US" style="font-size:8.0pt;color:#538135;mso-fareast-language:#2000">
</span></b><span lang="EN-US" style="font-size:8.0pt;color:black;mso-fareast-language:#2000">+41 840 888 000</span><span lang="EN-US" style="font-size:12.0pt;color:black;mso-fareast-language:#2000"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:8.0pt;color:#C00000;mso-fareast-language:#2000">M</span></b><b><span lang="EN-US" style="font-size:8.0pt;color:black;mso-fareast-language:#2000">
</span></b><b><span lang="EN-US" style="font-size:8.0pt;mso-fareast-language:#2000"><a href="mailto:sriccio@swisscenter.com"><span style="color:blue">sriccio@swisscenter.com</span></a></span></b><span lang="EN-US" style="color:black;mso-fareast-language:#2000"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>