Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
1
vote
1 answer

DMARC Report: Sometimes DKIM Fails for Mail Server IP

What does it mean when some DMARC records indicate a failure for the correct server: 1.2.3.4 8 none …
Louis Waweru
  • 755
  • 1
  • 9
  • 29
1
vote
2 answers

How to set Exim envelope domain to From domain

I've set up DKIM on Exim with the domain set like: DKIM_DOMAIN = ${sender_address_domain} However, the domain is always set to the same domain (my primary domain), which causes DMARC validation to fail, because of alignment, when sending emails for…
Sam Bull
  • 325
  • 4
  • 12
1
vote
2 answers

How to read this DMARC report? Why does Yahoo still reject mails from my server?

I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on behalf of my domain, and even a reverse DNS…
Shaul Behr
  • 243
  • 1
  • 5
  • 13
1
vote
1 answer

Gsuite DMARC SPF Setup Failure

I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC reports from Postmark still show 70% of messages as…
AudRE
  • 11
  • 2
1
vote
2 answers

SPF authentication mixed pass/fail without SPF record, in DMARC report

I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows only mail from my MTA as passing. …
TSG
  • 1,674
  • 7
  • 32
  • 51
1
vote
1 answer

Is it possible to configure DMARC to only receive reports for main domain and not sub domains?

The question is pretty much in the title. I have a domain, which has a subdomain with it's own DMARC record. The subdomain marketing.xxx.com is managed by a third-party and they handle the DMARC reports for their subdomain by themself. I now want to…
s1lv3r
  • 1,155
  • 1
  • 14
  • 24
1
vote
1 answer

How to install opendmarc on Debian Wheezy

How can I install opendmarc on Debian Wheezy? I have tried: ~ $ echo 'deb http://ftp.debian.org/debian wheezy-backports main contrib' >> /etc/apt/sources.list ~ $ apt-get update ~ $ apt-get install opendmarc But it's unable to find the…
takeshin
  • 1,471
  • 3
  • 21
  • 28
1
vote
1 answer

Whats the purpose of getting daily DMARC reports from google about my Mail Server?

I've been getting DMARC reports from google everyday after setting this up on my domain to prevent domain spoofing. Do I really need to have this daily report? I've never opened the attached zip file before. I have a very small site with less than…
Patoshi パトシ
  • 239
  • 4
  • 15
1
vote
1 answer

DMARC SPF fails when using PostSRSD

I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To prevent the SPF from these emails from becoming…
John Doe
  • 323
  • 3
  • 16
1
vote
1 answer

DMARC Failing cant figure out why

When sending a message from salesforce.com through my companies domain surgishop.com I am getting a DMARC fail. I believe I have SPF and DKIM correctely configured but could use some help on figureing out why DMARC fails. Email…
AHCB
  • 13
  • 3
1
vote
1 answer

Does an SPF SoftFail trigger DMARC reject

I've googled around and even tried to find the answer in the RFC to this one. For this question, let's assume DKIM will always fail and leave it out of the picture. If the DMARC policy is p=reject and the SPF is configured to SoftFail (~all), should…
Juicy
  • 169
  • 1
  • 5
1
vote
0 answers

What is wrong with this e-mail which is failing SPF(mailfrom) and DMARC?

This is a follow-up from "Why is my opendmarc failing pretty much everything that comes through?". I'm really struggling to understand what is going on. Outgoing mail is verified correctly by the receiving end (e.g., Gmail). Some incoming mail seems…
Morpheu5
  • 259
  • 4
  • 18
1
vote
1 answer

Can I bypass SPF restrictions by using an SMTP envelope FROM with another domain that has either no SPF record or an invalid one

Consider DMARC record: v=DMARC1;p=reject;rua=mailto:xyz;ruf=mailto:xyz;adkim=s;aspf=s;pct=100;fo=1;sp=reject Also consider domain example.com with a TXT record: v=spf1 include:_spf.google.com -all Now imagine a third party sends an email using…
David
  • 189
  • 11
1
vote
1 answer

Can one bypass DMARC policy DKIM requirements simply by not using DKIM or by using an SMTP envelope with a valid DKIM for the envelope from domain

Am I right to say that DMARC has no way to say "all emails must be signed". My understanding here is that I can specify that I want DKIM to be either lax or strict - which I understand to mean that, if the message happens to be signed (consider…
David
  • 189
  • 11
1
vote
1 answer

using _report._dmarc. records with sub.domains

I have a sub.domain sending emails. From: Newsletters@sub.example.com I have set up the following DMARC record. _DMARC.sub.example.com TXT "v=DMARC1; p=none; rua=mailto:reports@another.com; ruf=mailto:reports@another.com; fo=1" I now want to setup…
David Hill
  • 11
  • 2
1 2 3
…
15 16