Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
0
votes
2 answers

How to setup DMARC for both AWS SES and Office 365

I'm trying to get DMARC working for the emails I send via Office 365 as well as Amazon SES. It's working for Office 365 because I setup the SPF and DKIM records in my DNS but it's failing for the emails I send via Amazon SES because of a domain…
Russell G
  • 153
  • 1
  • 1
  • 7
0
votes
2 answers

Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails

I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is FAIL). My domain's SPF record currently looks like…
sdek
  • 165
  • 1
  • 2
  • 8
0
votes
2 answers

Why does DMARC fail for forwarded emails from this particular domain when it passes for all other domains?

I run a virtual mail server that forwards emails to my domain to a Gmail address, and I use PostSRSd to rewrite the addresses. For example, if someone sends an email to john@mydomain.com, my mail server will rewrite the address (to something like…
John Doe
  • 323
  • 3
  • 16
0
votes
1 answer

Hotmail does not flag or remove phishing messages from email addresses on a domain with SPF enabled

The email address of the sender of our newsletter is used for phishing purposes. We do have a valid SPF record (ends with -all) and dmarc on our domain (confirmed by mxtoolbox.com : every checks are green/good). However, some hotmail.com and yahoo…
sglessard
  • 109
  • 3
0
votes
1 answer

Mail proxy with SPF and DMARC without changing FROM headers

Here is my situation. We have internal network, with lots of 2nd level subdomains - foo.internal.domain.ltd as example. Those subdomains may or may not have public DNS records with Class A IPs. Then, we have a single subdomain, that acts as a proxy…
Georgi Yankov
  • 13
  • 2
0
votes
1 answer

DKIM and how it relates to DMARC reports

I've been tasked with setting up DKIM, SPF and DMARC for a business. I come from more of a development background, so as a result, I've been a bit confused on how to interpret the DMARC reports I'm seeing. I'm using a DMARC report analyzer…
wooters
  • 101
  • 2
0
votes
1 answer

DKIM E-Mail verification - prevent receivers from accepting unsigned emails?

I have set up SPF, DKIM and DMARC in my domain (to the best that I can figure out), but I still can send spoofed emails - without a DKIM signature - and they are accepted (at least when I test with GMail - I assume they will be the most strict about…
Guss
  • 2,670
  • 5
  • 34
  • 59
0
votes
1 answer

How to proper dns zone config for selfhosted email server

Looking to harden the sending authentication of my email server, I am looking for some usefull hints on the topic. As I have in total 4 Vps Servers where emails will be send from, registration confirmation, password resets etc... aswell multiple…
KaliMucho
  • 1
  • 1
0
votes
0 answers

Send bulk emails with valid DMARC security

We are implementing a feedback feature in our web application. After completion of an event, we are sending emails requesting feedback and ratings to our visitors. If we do write the following DMARC entry, it is not working. If we make DMARC…
Akash Samal
  • 1
  • 1
0
votes
0 answers

Correct SPF record

I have been asked to apply DMARC protection to a domain. Part of this requires me to add an DNS record to the domain management console, however I have come across a stumbling block. The DMARC checker says there is a problem with the SPF record of…
Max Johnson
  • 9
  • 1
0
votes
1 answer

How to prevent calendar invite responses from being blocked between two Google Workspace accounts?

My company has two separate Google Workspace accounts, each associated with a separate domain (lets call them domainA and domainB). Employees have email addresses assigned to them for both domains. If alice@domainA.com sends bob@domainB.com a…
Shaun Scovil
  • 103
  • 3
0
votes
1 answer

Managing SPF with multiple users on an email provider

I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked for a bit. My issue is that some of our users have…
Neil C
  • 9
  • 1
0
votes
1 answer

Network Solutions DNS not always returning DKIM and SPF records

If there is a more appropriate place to ask this or it is a duplicate, please tell me. I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to stricter authorization requirements enforced on certain…
jdmayfield
  • 281
  • 3
  • 13
0
votes
0 answers

postfix to gmail silent delivery failure

With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've tried delivery is flowing. However, when I send an…
PaulProgrammer
  • 131
  • 6
0
votes
0 answers

Softfail on forwarded emails sent through Yahoo mail - Is there a fix?

happy to be here. Excuse me for the wall of text but I am trying to help a friend who wants to keep on using his Yahoo mail for sending emails from his business email address. His mail server is on cPanel with shared IP address 212.16.186.119 and we…
Manou Allou
  • 1
  • 2
1 2 3
…
15 16