Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
226 questions
1
vote
1 answer
Confused about SPF Records
I thought that ?all in SPF should not be used.
Then I examinated SPF records of some local email provider companies and I found this:
v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?all`
Isn't this basically saying to mark failed…
Bear Black
- 11
- 1
1
vote
1 answer
DMARC failure for delivery report
I have a Docker-based mail server (Mailu) setup. It's working great except for delivery reports which are sent automatically (one of the user mailboxes is full and a "Quota exceeded" notification is sent to the sender).
The reports are rejected by…
andi
- 121
- 6
1
vote
1 answer
SPF and DMARC - how is the SPF policy used
My domain has a strict DMARC policy (p=reject) and a standard SPF policy with ~all catchall.
My email provider is Google Workspace.
I received an email spoofing my sender address. It came from 41.174.75.34 - a Zambian IP address which is blacklisted…
chutz
- 7,888
- 1
- 29
- 59
1
vote
2 answers
Can somone explain this DMARC report? did it fail or pass? why am i getting these if they passed?
Can anyone tell me what this means? As far as I can tell they all pass, but I dont know if this is yahoo sending me this or my server telling this passed or what. My server I set up DMARC I think
…
user603315
- 11
- 1
1
vote
1 answer
Forward messages to Gmail (postfix+SRS) has DMARC failure even though SPF and DKIM succeed
I run my own domain, but forward many email addresses to my gmail account. Recently, I started seeing a lot of messages marked by gmail as spam. I have SPF set for my outgoing email, and use SRS to rewrite the from address as my own. I also have…
Mikeage
- 2,741
- 6
- 26
- 37
1
vote
1 answer
Windows DNS and long DKIM keys
One of our third party services that we sends as provided us with a DKIM record that is longer than 255 characters and they won't provide a shorter one. How do I properly use what they've provided with Windows DNS?
I've tried the following solutions…
kausner
- 77
- 6
1
vote
1 answer
Email forwarding SPF and DKIM domains
In preparation for publishing a strict DMARC policy, I've:
Published a reporting-only policy.
Gathered nearly 2 months' worth of reports and uploaded them to dmarcian.
Started analysing them and looking for usage problems which need to be…
mythofechelon
- 905
- 3
- 24
- 42
1
vote
1 answer
emails to Yahoo are ending up in SPAM folder despite spf=pass, dkim=pass and dmarc=pass
Are we possibility having a reputation problems with Yahoo emails?
Yahoo raw mail header finds my policy I published: dmarc=success(p=REJECT,sp=REJECT)
Emails to clients at Google and Outlook are not ending up in spam, but Yahoo is.
Finally a week…
MeSo2
- 254
- 1
- 3
- 18
1
vote
1 answer
Why is opendmarc SPF failing this arriving message?
Why is this incoming message failing?
postfix/smtpd[4776]: connect from mail-mw2nam10on2073.outbound.protection.outlook.com[40.107.94.73]
postfix/smtpd[4776]: Anonymous TLS connection established from…
Andrew
- 145
- 9
1
vote
1 answer
Postfix send mail only to GMail, all other domains are deferred and not sended
My Postfix server is running on Debian Stretch. It is able to send emails to a GMail address without problems which are not considered as spam. At the DNS level I configured DKIM, SPF and DMARC and GMail informs me of the "Pass" value for all three.…
Zetam
- 11
- 1
1
vote
1 answer
How to resolve "signing key too small" issue from mail-tester
We've recently been having some email delivery issues, so I find myself taking my first dive into the email server set-up world to make sure our emails are arriving as expected.
I ran mail-tester a few days back and it told me to add this DMARC…
Vincent
- 111
- 3
1
vote
4 answers
Using SPF and DMARC records to combat invalid email subdomains
I have been able to confirm that bad actors are sending emails from nonexistent subdomains of my company's primary domain.
Let's say my primary domain is foo.com. Email is sent from that base domain from my own mail system. Due to partnerships…
CaptainZack
- 11
- 3
1
vote
1 answer
Can I set dmarc to tell receiver to fail if no DKIM signature provided in email?
I set SPF, DKIM and DMARC for my email server. I build my own mail server on my personal computer.
Then I disable signing DKIM signature and send an email to Gmail. Gmail shows SPF pass and DMARC pass and tell me it's a normal/good email.
So my…
Rick
- 309
- 2
- 4
- 15
1
vote
1 answer
dmarc is failing for alias domain hosted in AWS’s DNS-Route 53
We have a problem with _dmarc record for our alias domain.
We use AWS’s DNS-Route 53 and Google Apps.
When sending an email from the primary domain, _dmarc passes validation. But when sending from the alias domain, it fails.
This is the header of an…
Caroline Oliva
- 11
- 3
0
votes
1 answer
How did this pass DKIM according to DMARC report?
I recently added a DMARC record for one of my domains. Let's call it mydomain.com:
v=DMARC1;p=none;rua=mailto:dmarc_reports@mydomain.com;ruf=mailto:dmarc_reports@mydomain.com;fo=1"
I have been receiving reports over the last couple of days, but…
Mike
- 689
- 3
- 9
- 27