Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
3
votes
1 answer

Postfix setup with different domain name, reverse lookup and SPF

I would like to set up Postfix properly to serve multiple virtual domains while complying to all standards and being able to enable security measures like SPF. The server has the hostname server.domain.tld. Postfix has mydomain set to…
StackExchange42
  • 131
  • 3
3
votes
1 answer

How do I respond to DMARC Forensic Reports

I have just received a DMARC forensic report from Hotmail/Microsoft. My SPF policy seems to have successfully blocked the offending email. I have also blocked the offending IP using IPTables (just in case they try another way). Is there anything…
dave37
  • 133
  • 3
3
votes
1 answer

Interpreting a DMARC report that seems to have conflicting data

I recently implemented DMARC in monitoring mode, in order to begin preparing all the domains I manage. Here is the aggregate report for yesterday. I don't understand why DKIM would evaluate to false under policy_evaluated when DKIM is marked pass…
samh
  • 213
  • 4
  • 11
3
votes
2 answers

SPF and DKIM help: Do the FAIL reports from DMARC indicate an issue?

I am having trouble determining if my SPF and DKIM are configured properly. Here are key details: My domain is mysteryscience.com We send mail from google apps, from SendGrid, and from Intercom. All seem to be working properly, although I do hear…
Keith Schacht
  • 131
  • 1
  • 3
3
votes
1 answer

DMARC 'sampled out' policy override effect in GMail server

Anyone know what actually a sampled out override reason mean in DMARC aggregated daily reports? I only get those from GMail and recently I've got some complains of undelivered messages from recipients or complaints that messages land in spam folder.…
squirrely
  • 209
  • 3
  • 11
3
votes
4 answers

Is it OK to set up a DMARC record with no rua and ruf tags?

All of my systems ask me to set up a DMARC record, and I want to. It seems to be universally recommended now. However, no one will be monitoring the email performance of the website, or would know how to interpret reports if they were generated. The…
hommealone
  • 31
  • 1
  • 2
3
votes
1 answer

How is this email passing DMARC?

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.) This is disturbing, as it shows as "from foo.com", yet the sender is definitely not from "foo.com". The mailbox "hello@foo.com" is a…
Lawrence Wagerfield
  • 47
  • 9
3
votes
1 answer

why is this DMARC failing verification?

I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3). * Your DKIM signature is valid * Your message failed the DMARC verification A DMARC policy allows a sender to indicate that their emails are…
Stuck
  • 133
  • 1
  • 5
3
votes
1 answer

When using a subdomain with DMARC configured to send RUA, is it necessary to add DMARC reports TXT record?

If I send an email from username@subdomain.example.com with rua=username@example.com in the DMARC record of subdomain.example.com, is it necessary to create a DMARC reports TXT record (e.g., subdomain.example.com._report._dmarc.example.com TXT…
Paul
  • 3,037
  • 6
  • 27
  • 40
3
votes
1 answer

Is it a DMARC failure if disposition=none & dkim=fail?

When I get one of these DMARC reports from Google is it because there is a problem? Or is it standard protocol. I am curious because I sent one test email and got this DMARC report to abuse@orcaaccounting.com. I just want to make sure everything…
powerhousemethod
  • 153
  • 2
  • 8
2
votes
2 answers

Change DMARC Report frequency

My current record look like this: v=DMARC1; p=quarantine; rua=mailto:varun1@varunagw.com; ruf=mailto:Varun2@VarunAgw.com; pct=100; ri=604800 Still for some reason, I receive E-Mail from Google everyday instead of 7 days (604800 seconds) which is…
VarunAgw
  • 313
  • 4
  • 12
2
votes
3 answers

Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com

I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? Because with DMARC I think it'll also have to apply…
cnst
  • 13,848
  • 9
  • 54
  • 76
2
votes
1 answer

OpenDMARC with multiple MX: correct setup for trust between servers

There are many tutorials on how to setup OpenDMARC on your favorite flavor of Linux, but they all focus on single server configurations. My goal was to keep backup secondary MX servers, but enforce RejectFailures true for DMARC p=reject to be…
Esa Jokinen
  • 46,944
  • 3
  • 83
  • 129
2
votes
2 answers

Why am I only receiving DMARC aggregate reports from Google?

I have configured SPF, DKIM, and DMARC for a couple of domains that use G Suite as an email/office suite provider. Everything is looking great so far, except for some reason Google is the only provider that is sending us daily aggregate reports, and…
Jeff
  • 27
  • 6
2
votes
2 answers

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as we all know, SPF breaks forwarding. DKIM is a lot…
Halfgaar
  • 8,084
  • 6
  • 45
  • 86
1 2 3
…
15 16