Issue PHPMailer - X-PPP-Vhost header is changed to subscription-domain and causes DMARC reject

[japjay]

Hello, I have a subscription with three domains configured.
Domain 1: itservices-schell.de
Domain 2: webdesign-schell.de
Domain 3 and subscription-domainname: jasonschell.de
Subscriptions' system user: jasonschell

On both is WordPress installed, E-Mail-Service activated with Postfix/Dovecot, E-Mail-Subaddresses, fix incorrect sender for outgoing mails, limit-out mails, DMARC, DKIM and SPF activated with DNS-entry v=DMARC1; p=reject and finally spamprotection with DNSBL.

Issue:
I am sending a testmail with WordPress wp-mail() from Domain 1 to configured mailbox "[email protected]".
Mail will be rejected due to DMARC settings - see log:

Expand/Collapse Block: Log

Oct 29 11:09:16 ns1 plesk sendmail[47612]: handlers_stderr: INFO:__main__:Setting 'X-PPP-Vhost' header to 'jasonschell.de'
Oct 29 11:09:16 ns1 plesk sendmail[47612]: handlers_stderr: PASS
Oct 29 11:09:16 ns1 plesk sendmail[47612]: PASS during call 'limit-out' handler
Oct 29 11:09:16 ns1 check-quota[47615]: Starting the check-quota filter...
Oct 29 11:09:16 ns1 plesk sendmail[47612]: handlers_stderr: SKIP
Oct 29 11:09:16 ns1 plesk sendmail[47612]: SKIP during call 'check-quota' handler
Oct 29 11:09:16 ns1 dk_sign[47617]: Starting the dk_sign filter...
Oct 29 11:09:16 ns1 plesk sendmail[47616]: handlers_stderr: PASS
Oct 29 11:09:16 ns1 plesk sendmail[47616]: PASS during call 'dd51-domainkeys' handler
Oct 29 11:09:16 ns1 postfix/pickup[44836]: 43109801C4: uid=10003 from=<[email protected]>
Oct 29 11:09:16 ns1 postfix/cleanup[47170]: 43109801C4: message-id=<[email protected]>
Oct 29 11:09:16 ns1 postfix/qmgr[44837]: 43109801C4: from=<[email protected]>, size=1236, nrcpt=1 (queue active)
Oct 29 11:09:16 ns1 postfix-local[47621]: postfix-local: [email protected], [email protected], dirname=/var/qmail/mailnames
Oct 29 11:09:16 ns1 spamassassin[47622]: Starting the spamassassin filter...
Oct 29 11:09:16 ns1 spamd[35216]: spamd: connection from ::1 [::1]:43246 to port 783, fd 5
Oct 29 11:09:16 ns1 spamd[35216]: spamd: processing message <[email protected]> for [email protected]:30
Oct 29 11:09:16 ns1 spamd[35216]: spamd: clean message (0.1/6.0) for [email protected]:30 in 0.0 seconds, 1346 bytes.
Oct 29 11:09:16 ns1 spamd[35216]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,NO_RELAYS,URIBL_BLOCKED scantime=0.0,size=1346,[email protected],uid=30,required_score=6.0,rhost=::1,raddr=::1,rport=43246,mid=<[email protected]>,autolearn=no autolearn_force=no
Oct 29 11:09:16 ns1 postfix-local[47621]: PASS during call 'spam' handler
Oct 29 11:09:16 ns1 dk_check[47624]: Starting the dk_check filter...
Oct 29 11:09:16 ns1 dk_check[47624]: DKIM verify result: Success
Oct 29 11:09:16 ns1 postfix-local[47621]: PASS during call 'dd52-domainkeys' handler
Oct 29 11:09:16 ns1 dmarc[47625]: Starting the dmarc filter...
Oct 29 11:09:16 ns1 dmarc[47625]: SPF record was not found in Authentication-Results
Oct 29 11:09:16 ns1 dmarc[47625]: Store DKIM result for 'jasonschell.de' into DMARC library.
Oct 29 11:09:16 ns1 dmarc[47625]: DMARC: REJECT message for [email protected]
Oct 29 11:09:16 ns1 postfix-local[47621]: STOP during call 'dmarc' handler
Oct 29 11:09:16 ns1 postfix-local[47621]: message discarded by a mail handler
Oct 29 11:09:16 ns1 postfix/pipe[47342]: 43109801C4: to=<[email protected]>, relay=plesk_virtual, delay=0.09, delays=0.01/0/0/0.07, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Oct 29 11:09:16 ns1 postfix/qmgr[44837]: 43109801C4: removed

Same happens when I try to do a testmail with wp-mail() to my iCloud-mail-address: [email protected]:

Expand/Collapse Block: Log

Oct 29 11:14:07 ns1 plesk sendmail[47814]: handlers_stderr: INFO:__main__:Setting 'X-PPP-Vhost' header to 'jasonschell.de'
Oct 29 11:14:07 ns1 plesk sendmail[47814]: handlers_stderr: PASS
*****shorted*****
Oct 29 11:14:07 ns1 plesk sendmail[47819]: PASS during call 'dd51-domainkeys' handler
Oct 29 11:14:07 ns1 postfix/pickup[44836]: A0995801C4: uid=10003 from=<[email protected]>
Oct 29 11:14:07 ns1 postfix/cleanup[47824]: A0995801C4: message-id=<[email protected]>
Oct 29 11:14:07 ns1 postfix/qmgr[44837]: A0995801C4: from=<[email protected]>, size=1235, nrcpt=1 (queue active)
Oct 29 11:14:19 ns1 postfix/smtp[47828]: A0995801C4: to=<[email protected]>, relay=mx01.mail.icloud.com[17.57.154.23]:25, delay=12, delays=0.03/0.01/2.7/9.2, dsn=5.7.1, status=bounced (host mx01.mail.icloud.com[17.57.154.23] said: 554 5.7.1 Your message was rejected due to itservices-schell.de's DMARC policy. See https://support.apple.com/en-us/HT204137 for info (in reply to end of DATA command))
Oct 29 11:14:19 ns1 postfix/bounce[47832]: A0995801C4: sender non-delivery notification: 9F396801C5
Oct 29 11:14:19 ns1 postfix/qmgr[44837]: A0995801C4: removed
Oct 29 11:14:19 ns1 postfix-local[47834]: postfix-local: from=MAILER-DAEMON, [email protected], dirname=/var/qmail/mailnames
Oct 29 11:14:19 ns1 dk_check[47835]: Starting the dk_check filter...
Oct 29 11:14:19 ns1 dk_check[47835]: DKIM verify result: DKIM Feed: No signature
Oct 29 11:14:19 ns1 postfix-local[47834]: PASS during call 'dd52-domainkeys' handler
Oct 29 11:14:19 ns1 dmarc[47836]: Starting the dmarc filter...
Oct 29 11:14:19 ns1 dmarc[47836]: SPF record was not found in Authentication-Results
Oct 29 11:14:19 ns1 dmarc[47836]: DMARC: PASS message for [email protected]
Oct 29 11:14:19 ns1 postfix-local[47834]: PASS during call 'dmarc' handler
Oct 29 11:14:19 ns1 postfix-local[47834]: cannot chdir to mailname dir jasonschell: No such file or directory
Oct 29 11:14:19 ns1 postfix-local[47834]: Unknown user: [email protected]
Oct 29 11:14:19 ns1 postfix/pipe[47833]: 9F396801C5: to=<[email protected]>, relay=plesk_virtual, delay=0.02, delays=0/0/0/0.01, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Oct 29 11:14:19 ns1 postfix/qmgr[44837]: 9F396801C5: removed

Mails sent with SMTP via Outlook or other mailapps are being delivered as it should be.

I'm wondering whether "X-PPP-Vhost" is causing the main problem because of changing the header to the subscription domain.
Header is not changed when sending mail with SMTP.
I'm attaching a mail header in comments.

Deactivating DMARC in mailserver-settings is working though, but it's not a practicable solution...

I have a few subscriptions which only have one domain inside, they are working without problems (since domain-name is subscription-name the DMARC-handler won't reject them...).

What's the trouble here? Possibly a bug in Plesk?
Thanks in advance for help!

 

[japjay]

Sent from Domain 2 to Domain 1 with DMARC disabled to receive the mail:

Expand/Collapse Block: Mail Header

Received: by ns1.itservices-schell.de (Postfix, from userid 10003)
    id 00D9780103; Wed, 28 Oct 2020 23:42:22 +0100 (CET)
From: "WordPress" <[email protected]>
To: <[email protected]>
Subject: Health Check - Testnachricht von https://webdesign-schell.de
Date: Wed, 28 Oct 2020 23:42:22 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
    charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Mailer: PHPMailer 6.1.6 (https://github.com/PHPMailer/PHPMailer)
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
    ns1.itservices-schell.de
X-Spam-Level:
X-Spam-Status: No, score=0.2 required=6.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
    NO_RELAYS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.4
X-Original-To: [email protected]
X-PPP-Message-ID: <[email protected]>
X-PPP-Vhost: jasonschell.de
Thread-Index: AQJaKUoDz5a70meM2SMaL/9Bi/dvbw==