Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
0
votes
1 answer

How can it be possible dkim fails whereas spf pass

I have set up a postfix which sends emails. I have configure spf, dkim and dmarc (with p=none). I have checked with mail-tester: spf and dkim work fine. I have set up a dmarc rua in order to receive dmarc reports. I have seen something strange in…
Bob5421
  • 319
  • 3
  • 8
  • 16
0
votes
1 answer

How do I add individual mail-sending websites to my SPF record?

My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:xxxxxxxx.xxxxx.hubspotemail.net ~all We also have…
ST7686
  • 1
0
votes
1 answer

Why am I failing SPF only in my Google DMARC report?

Curious as to why my Google DMARC is coming back with a fail under SPF. Here is the report: google.com …
2kreate
  • 1
  • 1
0
votes
1 answer

SPF record with DMARC policy is not picking up the policy

We are now going through security verification, and we are using SecurityScorecard for it. One of the issues that we are still trying to fight, is the SPF record. The details of the error are as follows: SPF softfail record without DMARC policy…
Shurik Agulyansky
  • 101
  • 1
0
votes
1 answer

dmarc reports and invalid sender ip

We sometimes get an aggregated report where some mails fails due to invalid ip. That ip is not allowed to send emails from our domain (I guess it is spam. this IP does not belong to us) - is there any recommendation for what to do? We only use our…
Mr Zach
  • 247
  • 1
  • 6
0
votes
1 answer

550-5.7.26 Unauthenticated email from domain is not accepted due on ERP only

I have made updates to our mail server to use DMARC. So after This our ERP system cannot send emails to gmail.com or yahoo.com but Outlook sends emails with no problems. Below is the header for an email that was sent from my domain to Gmail and…
Ahmed Reda
  • 21
  • 2
  • 5
0
votes
1 answer

DMARC appears to fail, multiple DKIM signatures with one matching the from address

I am using a free outlook account. In the outlook account management portal I have added an alias for my custom domain (alias@mydomain.website). With this I am able to send mails from this alias, which appear in the receivers mailbox as "outlook…
Jorn Vanloofsvelt
  • 111
  • 3
0
votes
0 answers

DMARC, DKIM, or SPF? Emails going into quarantine

I have never had to deal with DKIM, DMARC, or SPF records before; however, our SPF record is full (10, Cloudflare) and I have a vendor whose emails aren’t making it to our mailboxes. I made exceptions in our spam filter for the emails, and have…
Cody
  • 1
0
votes
1 answer

I think I have a DMARC failure, posting to one list-server. The reports list my post under "forwarded," but the detail lines show mostly "reject"

I've recently implemented DMARC where I work. Most of the list-servers work just fine, either rewriting the from address or passing my posts unchanged, so they pass DKIM. One of them appears to be a problem, though. When I look at the DMARC report,…
hbquikcomjamesl
  • 259
  • 2
  • 16
0
votes
1 answer

DMARC report with passing O365 DKIM signature being sent by Google server

The dmarc report values are as follows: dkim_domain : mydomain.onmicrosoft.com dkim_result : pass selector : selector1-mydomain-onmicrosoft-com header_from : mydomain spf_domain : mydomain spf_result : fail source_ip : 209.85.219.70 (this is a…
Adam Winter
  • 129
  • 1
  • 6
0
votes
1 answer

DMARC quarantine and reject policy algorithm

If I update my DMARC policy to quarantine or reject, do email receivers check both the SPF and DKIM verification checks or just one? Or is it implementation dependent, i.e. email receivers can implement in varying ways? I have been monitoring DMARC…
n00b
  • 103
  • 3
0
votes
1 answer

Send each email from a different subdomain?

There are clearly benefits of using a subdomain for sending email to protection domain reputation, but is this always true? What about the extreme case, where a spam domain sends every email from a distinct subdomain?
rosstex
  • 133
  • 1
  • 5
0
votes
2 answers

I try to sent emails from different domain names using one email account and get dmarc=fail

For example, I have: example.com (in this domain I create account) need.com (additional domain) I want to give the users the ability to send emails as @need.com using alias in accounts settings. The problem is that all messages go to spam with DMARC…
Vasyl Kolomiets
  • 1
  • 1
0
votes
0 answers

Allowing Messages from IP Address DMARC

I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The messages leave the network and come back in, but…
RLBChrisBriant
  • 595
  • 1
  • 7
  • 22
0
votes
1 answer

Is everything OK based on this DMARC report?

Do I understand it correct that everything is OK and I have both SPF and DKIM configured correctly based on this report from Google? google.com …
IvanD
  • 103
  • 2
1 2 3
…
15 16