Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
226 questions
2
votes
1 answer
Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender "<>"
I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are a number of failing emails being send from my…
jnrcorp
- 135
- 5
2
votes
2 answers
Shouldn't Gmail fail this message using DMARC due to bad alignment?
I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the following message was still delivered to…
Casey Wilkins
- 153
- 1
- 6
2
votes
2 answers
Setup DKIM record without server signing
I'm using on one of my domains as hosting provider 101domain.
I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted to give it a try to their services of hosting…
sebholz
- 21
- 2
2
votes
1 answer
Why is OpenDMARC using my (the recipients) configuration for incoming mail?
Recently I've had some incoming emails be rejected by my mail server for failing DMARC checks. Upon closer inspection I noticed that the logs mentioned that the rejection was because OpenDMARC was applying my policy instead of the sender's policy.…
Coding Cat
- 21
- 3
2
votes
1 answer
DMARC fails on forwarded mails without DKIM
I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and work fine for most mail, i.e. forwarded mails…
user3298489
- 21
- 3
2
votes
3 answers
DMARC record not found
I'm trying to set up DKIM, SPF and DMARC on my mail server. Although DKIM and SPF work fine (as reported by auth-results@verifier.port25.com) i can't seem to get DMARC to work.
Both mxtoolbox.com and dmarcian.com report "No DMARC record found".
My…
Wolfgang
- 33
- 1
- 4
2
votes
1 answer
Checking DMARC Non-compliance, 4 Examples
We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we have gotten some from Google that showed up as…
mikato
- 121
- 5
2
votes
1 answer
SPF,DKIM Failure and outcome
I have been doing a lot of reading around SPF, DKIM and DMARC and i think i have digested most of the information and how all three work in the email world. However one question i couldn't find is, What will happen to an email if SPF failed and DKIM…
Twin Cam
- 31
- 3
2
votes
1 answer
Disable DKIM in exim for mailing lists
I am subscribed to a number of mailing lists that don't remove my DKIM signature but mutate messages (change From) and add their own DKIM. Resulting messages have 2 DKIM signatures, one failing and one passing.
DMARC is perhaps the biggest problem…
phd
- 123
- 5
2
votes
1 answer
Does bad domain reputation damage IP reputation?
Recently our mail server's reputation has been down rated by Hotmail, according to postmaster/live SNDS-service (from green to yellow and a single day in red). Therefore, me and my colleagues are now running a check of everything send from the mail…
Anne hansen
- 23
- 3
2
votes
1 answer
How to improve DMARC Compliance?
I've been monitoring our DMARC compliance with policy "p=none" for a month or two using both dmarcian and dmarcanalyzer. I've noticed that when we send a large email marketing campaign (10k+ emails), there is a spike in mail that fails DMARC that…
Stephen
- 121
- 3
2
votes
2 answers
Not receiving DMARC reports from major ESPs (gmail, yahoo, hotmail, etc)
I have recently set up a DMARC record for my domain. DMARC record looks like this, only domain name has been redacted:
v=DMARC1; p=none; fo=1; rua=mailto:dmarc-aggregate@domain.com!10m; ruf=mailto:dmarc-forensic@domain.com!10m; sp=reject
I'm…
Bintz
- 395
- 1
- 2
- 10
2
votes
1 answer
DMARC configured to reject - I don't understand this report from Google
I have DKIM and SPF configured, and set in my DMARC record for strict enforcement and policy=reject:
v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; ri=3600; ...
Today I received the following DMARC report from Google
Ex Umbris
- 854
- 7
- 24
2
votes
3 answers
DMARC for AmazonSES fails. Why?
I've setup SPF and DKIM for my custom domain to send emails.
While SPF and DKIM tests pass, the DMARC test fails for emails that have reply-to address different from "From" field.
My SPF record:
v=spf1 include:amazonses.com include:_spf.google.com…
user1537407
- 31
- 2
- 3
2
votes
3 answers
DKIM: Can I simply change the RSA key used in DKIM without changing the DKIM selector?
Can I simply change the RSA key used in DKIM (DNS TXT Record) without changing the DKIM selector or will this result in any issues?
If not, what's them the purpose of the DKIM selector?
BTW: 20120113 is the selector I'm talking about in…
Florian Schneider
- 303
- 3
- 8