Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

226 questions
1
vote
2 answers

Web-generated emails not compliant with DMARC

We have a classified ads website. Buyers can contact sellers. The message is directly generated on the site (php7) and sent to the user by email. If we follow the recommandations from openspf, we have these 2 solutions: Solution 1 Return-path:…
Toto
  • 293
  • 1
  • 4
  • 12
1
vote
1 answer

Seemingly valid SRS-processed message is being rejected by gmail servers

I have a virtual private server with its own IP and have configured SPF, DKIM, DMARC, SRS (with postsrsd) and all that jazz. Let's call it domainut.com. Most things are working, mail is being delivered to gmail --to the spam folder, because the IP…
MariusSiuram
  • 131
  • 7
1
vote
0 answers

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have looked up email source, and found log like this ( i…
ThinCrustItalianPizza
  • 11
  • 1
  • 4
1
vote
1 answer

How to setup SPF and DMARC for satellite hosts?

If I send mail directly from relay host - everything works like a charm. All checks are passed. Delivered-To: 102@host.me Received: by 10.100.182.171 with SMTP id t40csp2626933pjb; Thu, 26 Apr 2018 10:46:48 -0700 (PDT) X-Google-Smtp-Source:…
Falseclock
  • 11
  • 2
1
vote
0 answers

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up postfix/dovecot but it still ends in spam. And the…
user1998000
  • 11
  • 1
1
vote
1 answer

DMARC report: SPF fails with mx-domain as spf-domain in auth_result

I have setup a mail server with several postoffices/domains. DKIM, SPF and DMARC are setup for every domain. For the mailserver domain, which is a postoffice as well, I get weird DMARC reports, where the spf auth result lists the mx domain and the…
pgiparsec
  • 11
  • 3
1
vote
1 answer

Opendmarc connection refused for milter

Debian stretch. Postfix + dkim + dmarc. Opendmarc is not working. I'm getting: Nov 26 10:36:07 mail postfix/smtpd[30012]: warning: connect to Milter service inet:localhost:8893: Connection refused Relevant configs: /etc/default/opendmarc 7…
TheEditor
  • 231
  • 1
  • 5
  • 15
1
vote
1 answer

Where ARC public key is stored?

Where ARC public key is stored? For DKIM it is [selector]._domainkey.example.org. But for ARC? Is it the same as DKIM and holds in TXT query for domain mentioned above? Thank you.
Javier Hernández
  • 33
  • 1
  • 4
1
vote
1 answer

DMARC and RFC2298 compliant MDNs with a null MailFrom... Can it work?

This is an issue we're seeing with Exchange Online but it would be an issue with most hosted email I suspect. When Office 365 / Exchange Online sends an automatic reply (Out of Office for example) it adheres to RFC 2298 and the RFC5321.MailFrom is…
omniomi
  • 123
  • 8
1
vote
1 answer

DKIM for "From" domain or MX domain?

My server is handling mail for several virtual users and domains. The SPF records of the domains state that only the MX server is allowed to send mail (v=spf1 mx -all) and this MX server is a generic domain, so example.org and example.com have…
user178826
1
vote
1 answer

What does a failed SPF record tell me from a DMARC Aggregate report?

I have been trying to find a straightforward answer to this, but I have been having no luck. I also tried asking on the security focused Stackexchange site, but had no luck there is well. I am hoping someone here might have some insight. I am…
Dave
  • 11
  • 1
1
vote
1 answer

Should I use DKIM, SPF and DMARC on domains used only for alias/redirection inbound email?

I have a bunch of domains, let's say: example.org example.com example.net example.be My mail server is running on mail.example.net. I only use the domain example.com to send and receive emails. All the other domains are only used to receive emails…
wget
  • 291
  • 2
  • 8
1
vote
1 answer

Interpreting DMARC report

I have DKIM and SPF configured for my SMTP server, and recently set the policies to strict/reject. I received the report shown below from Google. Ths source IP is not my SMTP server. I read this as Google checking DKIM and SPF, with both failing,…
Ex Umbris
  • 854
  • 7
  • 24
1
vote
1 answer

Can I use DMARC if SPF fails

I'm trying to enable DMARC. The problem that I see is that since I use 3rd party companies for marketing emails, DMARC SPF fails for those emails because they put email from their own domain into return path (i.e. bounce email address). This is…
Roman_T
  • 341
  • 1
  • 5
  • 16
1
vote
1 answer

message headers say dkim = fail, stats say = PASSED. why the conflict, and how to fix?

In some-not-all received emails -- notably ONLY those sent via 'bulk' services -- I get a DKIM fail: "signature verification failed". Here's one example: Received message headers DKIM-Filter: OpenDKIM Filter v2.10.3 mail.example.com…
Jason
  • 11
  • 1
  • 3
1 2 3
…
15 16