Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
226 questions
0
votes
1 answer
How to use Cloudflare CNAME to have a unified DMARC policy?
According to DMARC FAQ it's possible to have a single policy for multiple domains, and that all tools refer to this main policy:
How can I put DMARC records on many domains at once?
Some organizations may have registered many domain names for…
Braiam
- 642
- 4
- 23
0
votes
0 answers
Hotmail DMARC reports show errors in DKIM verification, but not always
I set DKIM, SPF and DMARC on my domain. I placed on the DMARC register I want to receive reports to see if my implementation of rules it's ok or not, to set a strict rule to say if something it's wrong the destination server should delete the false…
NetVicious
- 462
- 5
- 17
0
votes
2 answers
Can DMARC apply to email already received?
We have a domain that has been "ruined" by spammers, using it's reputation for sending spam mails.
We're moving to a different domain and would like the previous domain to become a "death trap"; marking any new mail using the domain for from:,…
Martijn
- 356
- 5
- 13
0
votes
2 answers
Postfix policyd-spf reject None
How to configure policyd-spf in Postfix to reject domains with no SPF record?
The documentation doesn't specify this condition and its needed to reject spoofed/unauthorized emails on an outbound relay.
Similar Q&A on Stackoverflow recommends use of…
Pavin Joseph
- 130
- 10
0
votes
2 answers
SPF, DKIM and DMARC header order
I just recently set up DMARC on my mail server and in received mails, the order of SPF, DKIM and DMARC headers are strange. Moreover, if DKIM signature missign, there is no DMARC related "Authentication-Results" header at all.
Is this correct?…
Halacs
- 103
- 4
0
votes
1 answer
SPF redirect to subdomain TXT does not work for Google?
Funny situation, and I'm not sure if this is my fault or Google's.
I have a domain, example.com, which has 2 subdomains: main.example.com, and spf.example.com. For main.example.com domain, my TXT record used to be defined as: v=spf1…
StanTastic
- 860
- 1
- 8
- 25
0
votes
1 answer
Does DMARC send alerts even upon successful delivery?
I keep getting DMARC reports that show that my IP passed all SPF and DKIM checks. Is this just an email to say that everything's fine or is it an indication of a problem? If the latter, there's nothing in that email that would help figure out what…
mwoods
- 3
- 2
0
votes
1 answer
DKIM, SPF, DMARC, SPF OK mails are flagged as SPAM
I have a dedicated server running CentOS7 with Postfix, the problem is that all the sent mails are flagged as SPAM by hotmail and gmail despite DKIM, SPF, DomainKeys, DMARC records and keys wich are all OK (See photo1)headers from gmail
I'm using…
0
votes
1 answer
SPF, DKIM, DMARC, DomainKeys OK, emails flagged as SPAM
I have a new dedicated server running CentOS7 with Plesk 12.5 with postfix, and i have succesfully set SPF, DKIM, DMARC and DomainKeys as it shows this test from port25.com:
==========================================================
Summary of…
0
votes
3 answers
Improving email deliverability: Implementing DKIM and DMARC
I have a messaging system on my app where users can send messages directly to other users straight from my domain (not going through Mailchimp's Mandrill templates or Google Apps). I also have cron jobs that sends users' statistics to about 5,300…
Gabriel Ferraz
- 101
- 2
0
votes
1 answer
DNSsec error in Bind9.10 following update of freebsd10.1
My DNSsec began to fail following a ports update. I have reinstalled Bind on both master and slave but the error still persist.
35 ;; WE HAVE MATERIAL, WE NOW DO VALIDATION
36 ;; VERIFYING A RRset for www.ex-mailer.com. with DNSKEY:9381:…
nix
- 145
- 4
0
votes
1 answer
Partial DKIM pitfalls?
We've recently implemented DKIM for automated emails sent out from our website (SMTP on static IP). However we cannot implement DKIM for our hosted exchange email accounts (managed hosting sends from a range of IPs).
So in the DMARC reports I'm…
AbsolutelyN
- 1
- 1
0
votes
1 answer
Implementing SPF for a mail server that sends email on its own, with GoDaddy
I have some troubles configuring SPF/DKIM for a VPS with a running instance of Postfix. Thanks to DMARC reports I'm finding and fixing always more issues.
Today I have a problem by setting SPF records in GoDaddy for a subdomain that matches the…
usr-local-ΕΨΗΕΛΩΝ
- 2,359
- 7
- 34
- 52
0
votes
0 answers
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS names.
What we achieved for now is that SPF passes…
0
votes
1 answer
Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?
I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail.sub.domain.tld. (I also set up spf, dkim and…
cssdev
- 23
- 4