Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
8
votes
2 answers

DMARC failed, but SPF pass

If i sent a mail from my website (on a private server) to autoreply@dmarctest.org, i have this report : x.x.x.x 1 none
griotteau
  • 241
  • 1
  • 5
  • 9
8
votes
2 answers

How many emails can I put in one dmarc record's rua attribute?

How many emails can I put in one dmarc record? Is the following invalid because there are three mailto attributes? All the examples I see online have two addresses at most. "v=DMARC1; p=reject; rua=mailto:pm@dom.com, mailto:dmarc@dom.com, mailto:…
ThisClark
  • 298
  • 2
  • 8
7
votes
2 answers

Receiving DMARC reports for emails I do not send

I am hosting the email for my domain (lets call it example.com) on google apps (free legacy edition). I recently enabled the DMARC reports so I now get a daily report for the emails sent from my domain. My problem is that sometimes I get reports…
DorAga
  • 161
  • 1
  • 1
  • 6
7
votes
3 answers

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with IP 173.203.187.81 DMARC: 'FAIL' ... where 173.203.187.81…
clayRay
  • 181
  • 8
6
votes
1 answer

Is GMAIL incorrectly failing SPF?

0365 mail users are encouraged to use include:spf.protection.outlook.com -all in their SPF record. I have followed this guidance. My company's spf record says: v=spf1 include:spf.protection.outlook.com -all the spf.protection.outlook.com record…
OzPHB
  • 239
  • 3
  • 8
6
votes
2 answers

DMARC reporting unexpected SPF IP but DKIM still passes

I have both SPF and DKIM enabled on my domain. This domain is for a small company and we only have the one server (hMailServer if anyone thinks it's relevant). Recently I decided to enabled DMARC reporting and noticed something very peculiar about…
Fr33dan
  • 133
  • 1
  • 8
6
votes
2 answers

Designating A DKIM Signer Other Than The "From" Domain

A few months ago, I implemented SPF/DKIM/DMARC for my three-person company. After a trial period, I switched our DMARC to "p=reject", so that emails are rejected if they fail SPF/DKIM. Generally, it works: our emails go through, and based on data…
joseph_morris
  • 245
  • 3
  • 9
6
votes
1 answer

Which has bigger priority between DMARC and SPF?

First off let me start by saying I understand DMARC and SPF do not do the same thing. However both have an option to tell the receiving servers what to do with mails that do not pass SPF (and DKIM in the case of DMARC). Now let’s have a theoretical…
Frizlab
  • 163
  • 3
6
votes
1 answer

Mail from Teams forwarded to Gmail marked as spam due to DMARC failure

When I write a chat message in Microsoft Teams the receiver gets an e-mail notification on her Office 365 account (receiver@htlvb.at) when she is offline in Teams. The receiver set it up so that all her mails are forwarded to her personal Gmail…
Johannes Egger
  • 173
  • 1
  • 6
5
votes
2 answers

Email server: Remove rua from DMARC DNS entry or stop receiving DMARC reports

I have the following DNS entry for one of my clients email servers: _dmarc IN TXT "v=DMARC1; p=none; rua=mailto:postmaster@example.com" This is the only email server I'm administering, which has a DMARC DNS entry - in other cases SPF and DKIM was…
manifestor
  • 6,079
  • 7
  • 27
  • 39
5
votes
1 answer

NOT receiving DMARC reports from AOL / HOTMAIL / MSN / OUTLOOK / LIVE

My DMARC DNS record looks like this: (domain name is redacted) _dmarc.domain.com TXT "v=DMARC1; p=none; sp=none; rua=mailto:dmarc@domain.com; ruf=mailto:dmarc@domain.com; rf=afrf; pct=100; ri=86400" Now, I receive aggregate DMARC and forensic…
whallz
  • 103
  • 6
5
votes
7 answers

What format are DMARC dates?

I have a DMARC report that includes: 1500249600 1500335999 How do I convert the dates to something human?
Greg Pagendam-Turner
  • 973
  • 2
  • 13
  • 20
5
votes
2 answers

how to configuration dkim on exchange email server

Mails sent from our internal email server to public servers such as Gmail, Yahoo and all other external organizations are delivering to spam. We currently use exchange server, in order to tackle above mentioned problem we would like to configure…
enkhtuvshin
  • 51
  • 1
  • 1
  • 2
5
votes
1 answer

DMARC: must rua email match domain?

I'm trying to implement DMARC for a domain and the address specified in the rua tag is my own personal email for convenience. I have been receiving aggregate reports only from a handful of ESPs, and all of them minor ones. Notably, I'm receiving…
Bintz
  • 395
  • 1
  • 2
  • 10
5
votes
2 answers

Why does spf fail in DMARC report from Google?

I recently received a DMARC report from Google alerting me of a few SPF failures with mail originating from IP addresses belonging to Amazon SES. A sample record is as follows (I have replaced our domain with example.com.):
1
2
3
15 16