title: DMARC Report Analysis
body: <p>We are not able to understand the DMARC reports.
  Below is the one we got from Yahoo.</p>
  
  <h2>DMARC Report</h2>
  
  <pre><code>&lt;?xml version="1.0"?&gt;   
  &lt;feedback&gt;  
    &lt;report_metadata&gt; 
      &lt;org_name&gt;Yahoo! Inc.&lt;/org_name&gt;    
      &lt;email&gt;postmaster@dmarc.yahoo.com&lt;/email&gt;   
      &lt;report_id&gt;1519264633.286724&lt;/report_id&gt;    
      &lt;date_range&gt;    
        &lt;begin&gt;1519171200&lt;/begin&gt; 
        &lt;end&gt;1519257599 &lt;/end&gt;    
      &lt;/date_range&gt;   
    &lt;/report_metadata&gt;    
    &lt;policy_published&gt;    
      &lt;domain&gt;mydomain.com&lt;/domain&gt;   
      &lt;adkim&gt;r&lt;/adkim&gt;    
      &lt;aspf&gt;r&lt;/aspf&gt;  
      &lt;p&gt;none&lt;/p&gt; 
      &lt;pct&gt;100&lt;/pct&gt;  
    &lt;/policy_published&gt;   
    &lt;record&gt;  
      &lt;row&gt;   
        &lt;source_ip&gt;198.210.47.11&lt;/source_ip&gt;  
        &lt;count&gt;12&lt;/count&gt; 
        &lt;policy_evaluated&gt;    
          &lt;disposition&gt;none&lt;/disposition&gt; 
          &lt;dkim&gt;fail&lt;/dkim&gt;   
          &lt;spf&gt;fail&lt;/spf&gt; 
        &lt;/policy_evaluated&gt;   
      &lt;/row&gt;  
      &lt;identifiers&gt;   
        &lt;header_from&gt;mydomain.com&lt;/header_from&gt;   
      &lt;/identifiers&gt;  
      &lt;auth_results&gt;  
        &lt;dkim&gt;    
          &lt;domain&gt;woodersmtp.com&lt;/domain&gt; 
          &lt;result&gt;pass&lt;/result&gt;   
        &lt;/dkim&gt;   
        &lt;spf&gt; 
          &lt;domain&gt;woodersmtp.com&lt;/domain&gt; 
          &lt;result&gt;pass&lt;/result&gt;   
        &lt;/spf&gt;    
      &lt;/auth_results&gt; 
    &lt;/record&gt;
  </code></pre>
  
  <p>In this report,  SPF and DKIM fails but  pass for the same. Also not getting, what is this "woodersmtp.com" ? It's not my domain.</p>
  
  <p>Overall, I want to know:</p>
  
  <ol>
  <li><p>What are these "woodersmtp.com" and why emails from my domain are going through it ?</p></li>
  <li><p>How can I make sure SPF and DKIM passes only for legitimate emails?</p></li>
  <li><p>How to find out Message headers of all these failed emails?</p></li>
  </ol>