Questions tagged [dmarc]

DMARC, (Domain-based Message Authentication, Reporting & Conformance), is a technical specification standardizing how email receivers perform email authentication using the well-known SPF and DKIM mechanisms.

DMARC, (Domain-based Message Authentication, Reporting & Conformance), is a technical specification standardizing how email receivers perform email authentication using the well-known SPF and DKIM mechanisms.

http://www.dmarc.org/

152 questions
4
votes
3 answers

Does DMARC TXT record require trailing semicolon?

I've left off the trailing semicolon in each TXT record of my DMARC records, but I've never thought if this is ignoring some convention, or could cause lookups to fail somehow. For example, is there any difference between: "v=DMARC1; p=reject;…
Brian
  • 97
  • 1
  • 6
3
votes
0 answers

Configuring SPF/DKIM/DMARC for Google Apps Script

I have a Google Apps Script attached to a spreadsheet, and it uses MailApp.SendMail(). MailApp.sendEmail(recipient, subject, body, { noReply: true, htmlBody: htmlBody, name: emailFromName, replyTo: replyToEmailAddress, …
Brad
  • 39
  • 2
3
votes
1 answer

mail-sor-xxx.google.com fails DKIM / SPF check

I got a DMARC report for my domain as xyz.xml where it showed me domains & their corresponding checks (either SPF / DKIM) that failed.My problem is I have one entry as follows: 1
YoganA
  • 41
  • 4
3
votes
1 answer

Amazon SES SPF Record Fails

We have set up SPF with Amazon SES. When we run a test with https://www.dmarcanalyzer.com/ We get the following: So everything appears to be correct. However with our dmarc report we get a fail
PNC
  • 1,932
  • 19
  • 36
3
votes
1 answer

Recipient address rejected: Message rejected due to: SPF fail - not authorized

I company wants to send email to us, but it gets bounced back with the error "Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or…
GodAtum
  • 171
  • 2
  • 3
  • 11
3
votes
1 answer

Is it possible to create a correct SPF and DMARC DNS record when you use a CNAME?

In my setup I have a website (example.app) hosted on Heroku. Then, I use Sendgrid to send emails from the Heroku server to our users that forget their password. The email is registered using Google's Gsuite. So I also send emails from the Google…
Michael van de Waeter
  • 1,473
  • 15
  • 29
3
votes
1 answer

Does DKIM verify smtp/envelope-from or the mail/header from?

I want to understand the SPF/DKIM/DMARC Stack for authenticating e-mails. I understand that SPF works on the SMTP "mail from"/ envelope-from. But even on stackoverflow itself, I find contradictory information about if DKIM works on the envelope-from…
Tobi
  • 1,175
  • 1
  • 19
  • 44
3
votes
1 answer

Im receiving DMARC aggregate reports from strange domains - What does this mean?

I recently published a DMARC record with my domain to try and improve my email delivery to gmail. Everything seems to be going according to plan, except that I am receiving reports from strange places like qq.com and italiaonline.it. I didn't expect…
BJK
  • 31
  • 1
  • 2
3
votes
1 answer

DMARC RUA reports - who sends them?

As in the topic; which server exactly sends RUA reports to other servers? I am a DMARC user and receive a lot of reports every day. However, nobody has ever received reports from me! Do I set it up on my own? If yes, are there any ready-to-go…
Peter
  • 171
  • 2
  • 12
3
votes
1 answer

How to Fix DMARC configuration. Email dropping spam folder Google Apps

I have a domain set up on AWS Route53 and I use the GoogleApps for the administration of email accounts. I'm having trouble sending invite (Google Calendar/Hangout) to other domains. These invites are going in the SPAM box. My DNS Configuration $…
3
votes
2 answers

splitting DNS IN TXT records over multiple lines for DMARC et al

Over at dmarc.org, it's suggested that IN TXT records of DNS could be written in a special form within the zone file to make them not overflow the lines in your text editor. The DMARC policy record might look like this when retrieved using a …
cnst
  • 25,870
  • 6
  • 90
  • 122
2
votes
1 answer

Nodemailer - massive delay or missing emails in production

I currently have a site using Nodemailer & Gmail that works fine in my local development environment - any email sends instantly to the desired address. Sadly, in production, only the admin notifications are being sent and the user ones are taking a…
ld98
  • 120
  • 1
  • 9
2
votes
0 answers

SPF Passes In Gmail Original Mail but says failed in Dmarc report

I'm using a 3rd party service to send emails through my gmail account(with a custom domain). There is a weird thing happening with my SPF authentication. When I look at the "original email" in a recipient's inbox, it says the SPF passed. However,…
Epaulson2
  • 19
  • 2
2
votes
1 answer

How can you verify that an email was sent from the proper domain and that the contents of the email haven't been modified?

I'm examining my email headers (sent from Gmail) and am wondering which ones are best to verify that an email was sent from the proper domain and that the contents of the email haven't been modified?
Some Guy
  • 12,768
  • 22
  • 58
  • 86
2
votes
1 answer

G Suite - I want to send emails using two domain names using one email account

Assume, that I have two domains: a.com (in this domain I create account) b.pl (additional domain) I want to give the user x the ability to send emails as x@a.com and x@b.pl via one email account. Is such a scenario possible in GSuite? The most…
KerbenII
  • 23
  • 2
  • 3
1
2
3
10 11