Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
226 questions
0
votes
1 answer
Google DMARC reports for Google servers?
Each day I get a DMARC report from Google. They include records for our own outgoing emails, various 3rd party partners we've authorized to send on our behalf, and various spammers trying to spoof our domain. But here's something strange: they also…
HiredMind
- 101
- 3
0
votes
1 answer
Is it likely that RUF reports can be used to generate negative reputation for my server?
I recently enabled RUF reports for those requesting them, and it occurred to me that if someone wanted to, they could force my server to generate a lot of RUF reports for various domains.
Assuming my server is configured correctly, is it likely that…
Paul
- 3,037
- 6
- 27
- 40
0
votes
3 answers
AWS SES requirements on custom MAIL FROM domain
According to the docs, AWS SES has some requirements on what is an allowable MAIL FROM domain:
The subdomain you use for your MAIL FROM domain has to meet the following requirements:
The MAIL FROM domain has to be a subdomain of the verified…
user2959071
- 3
- 2
0
votes
1 answer
How does Dmarc alignment protect against anything?
I am specifically referring to Dmarc SPF alignment.
To get a Dmarc pass result, all it takes is that either SPF or DKIM aligns.
Let us say that I am an attacker, and try to impersonate abc.com.
I have not set up DKIM which means I'm going to fail…
pHeoz
- 163
- 7
0
votes
2 answers
Some clear instructions on writing the DMARC record
I have been under some pressure to produce the DMARC record for one of our customers. Unfortunately, they do not give me access to the domain vendor and instead repeatedly ask "What should they write in their order?".
I am not a domain expert.
This…
Disasterkid
- 111
- 3
0
votes
1 answer
VERP: rewrite from header of NDR?
We provide cmail delivery for external clients from several different domains.
We rewrite the envelope sender (AKA: "SMTP MAIL FROM","Return-Path" ) using a form of VERP. Thus we receive all the late bounces and have responsibility to forward them…
Jasen
- 826
- 6
- 12
0
votes
1 answer
Can I DKIM sign my email without running a server daemon just for that?
I have an email server that is working perfectly.
However, more and more other email servers are getting strict about DKIM signing and DMARC records so I guess I need to finally set that up ...
I am running a bind9 DNS server (works perfectly) and a…
user227963
- 209
- 1
- 2
- 11
0
votes
1 answer
SPF- and DKIM- align fails on a few emails from a larger batch
We are sending large numbers of emails (hundreds of thousands) mostly for our clients. Of course, we have configures SPF, DKIM, and DMARC records properly for all domains who use us. We pass all tests on various SPF and DKIM validators, and vast…
TomS
- 181
- 2
- 7
0
votes
1 answer
GSuite displaying "via" next to name after DNS change
After changing over to Cloudflare GSuite has been adding "via" next to the names of incoming emails. After a quick Google search I found this:
https://support.google.com/mail/answer/1311182?hl=en
However my DMARC reads:
v=DMARC1; p=none;
This is…
Tony
- 1
-1
votes
1 answer
Does record domain "include:" also refers to subdomains?
I have a doubt setting up my SPF record. I would like to know if I set up an include record in the SPF record will also be "including" the subdomains of that principal domain that I have included?.
Let's take a look of an example in my…
Santiago
- 11
- 3
-1
votes
1 answer
I have set the DKIM record but my emails is not signed?
I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm signature on it which cause the messages sometimes…
Islam Mohamed
- 7
- 1
-1
votes
2 answers
DKIM and DMARC configuration
Guys i have some questions regarding DKIM and DMARC configurations. I tried finding the answers but it is not clear.
1) Does it involve DNS server configuration only or there is additional configuration that must be performed on the mail relay…
subfire91
- 57
- 4
-1
votes
1 answer
DNS Records - CNAME
Quite newbie, so sorry any unconnected data. I am creating a DKIM and SPF records to emulate DMARC as a workaround. An external vendor of us, want to send emails under our domain using a subdomain.
I have configured my TXT records as:
TXT …
Kenzo_Gilead
- 105
- 6
-1
votes
2 answers
DMARC rua unable to send reports via sendmail to local e-mail address?
I've setup a small mail server with Postfix, Dovecot, and MySQL (MariaDB) on Debian. I've also configured TLS with Let's Encrypt. rDNS, DMARC, DKIM, SPF and Fail2Ban are also setup and confirmed to work.
My DMARC record looks like…
St4rb0y
- 59
- 7
-2
votes
1 answer
subdomains and SPF failures
I have recently moved some of my e-mail services to sub-domains (sub1.company.com, sub2.company.com) because the SPF of the main domain - company.com got full (lot's of includes and there is more relevant stuff there). Also, each of my subdomains…
Peter
- 1