Questions tagged [dmarc]

DMARC, (Domain-based Message Authentication, Reporting & Conformance), is a technical specification standardizing how email receivers perform email authentication using the well-known SPF and DKIM mechanisms.

DMARC, (Domain-based Message Authentication, Reporting & Conformance), is a technical specification standardizing how email receivers perform email authentication using the well-known SPF and DKIM mechanisms.

http://www.dmarc.org/

152 questions
2
votes
2 answers

What is considered a DMARC failure?

I'm trying to wrap my head around how DMARC works and how to treat the resulting emails. From what I have understood, DMARC works on three key features: SPF verification DKIM verification Domain alignment. But I'm not sure about when to consider…
Cyril N.
  • 38,875
  • 36
  • 142
  • 243
2
votes
1 answer

DMARC Failure only for linkedin

I just setup our domain a couple weeks ago to use SPF and DMARC, but no DKIM atm. But every now an then I receive an DMARC Failure report from linkedin: This is an email abuse report for an email message received from IP 213.160.4.146 on Tue, 16 Jul…
Verim
  • 1,065
  • 9
  • 17
2
votes
1 answer

How can I fix the problem with Gmail? Gmail marked email with passed SPF, DKIM and DMARC as spam

Gmail moves messages to spam folder. PTR records for ipv4 and ipv6 are available. I have the headers: SPF: PASS с IP-адресом 2a05:480:0:992f:0:0:0:2. DKIM: 'PASS', domain drom.com.ua DMARC: 'PASS' Delivered-To:…
Tyler21
  • 41
  • 7
2
votes
3 answers

Emails with DMARC: 'FAIL' even though it passes from the https://mxtoolbox.com validator

I am using username@example.net below for privacy, but this is happening to a real domain and email address. In the mass emails that we send, DMARC is failing: In my TXT records, this is what I have for DMARC: _dmarc 14400 IN TXT "v=DMARC1;…
Jaime Montoya
  • 6,915
  • 14
  • 67
  • 103
2
votes
1 answer

DMARC allow from third party

I would like to have a DMARC Reject policy, but having some issues making it pass. We use google apps/mail for our domain and use 2 third party email providers who send e-mails as us. I'm trying to make one of them work for now and to understand the…
Toro-gb
  • 23
  • 4
2
votes
2 answers

DKIM and DMARC set up on dedicate 1and1 server

I am having a little trouble figuring out this process. I can manage to get the DNS records set up for the DMARC, DKIM and SPF. I get lost with what i am trying to do with the private key for the DKIM. Currently i am using a dedicated server offered…
user3736943
2
votes
1 answer

Getting rid of 'via' in google mailing via Mailgun, DMARC, SPF and DKIM records

I am using mailgun under the domain 'mg.mydomain.org' but I want emails send to be authenticated to my domain, lets say its 'mydomain'. The settings below dont seem to work at all and I am still seeing the 'via' in gmail. Ive looked over the gmail…
Marc C
  • 317
  • 1
  • 4
  • 17
2
votes
0 answers

AWS SES DMARC - Gmail Bounce

I'm getting inconsistent Bounces from Gmail because of DMARC. Below are 2 examples where one was delivered and the other bounced: The Domains are different but the DNS, Dmarc, SPF and DKIM are the same. Does anyone have any advise as to why one…
Adam
  • 19,932
  • 36
  • 124
  • 207
1
vote
1 answer

DKIM passes even though domains don't match

I'm trying to figure out how DKIM verification works. My understanding so far has been that the domain inside DKIM-Signature header must match the domain inside From header in case for DKIM check to pass. I configured the opendkim SigningTable all…
user19108535
1
vote
1 answer

why DMARC policy detected as not enabled

I dont know why, when I test my domain via mxtoolbox this week I got result DMARC policy is not enabled. This is not happened before, everything is ok and I never do any changes in my DNS server. I checked my DNS record and there is no issue, my…
potitit
  • 63
  • 1
  • 8
1
vote
1 answer

SPF and DMARC for domain that should not send any emails

I have a domain that is used for some purposes, but not for any incoming or outgoing emails. How should the DNS be configured to mark that all received emails from this domain are spoofed and should be ignored?
user972014
  • 3,296
  • 6
  • 49
  • 89
1
vote
0 answers

DMARC compliance for AWS SES bounce emails sent with SendBounce

AWS SES has an API for programmatically sending a bounce email in reply to a received email—SendBounce. However, emails sent through SendBounce—unlike "normal" emails sent through SendEmail—only contain a DKIM-Signature for amazonses.com. Since…
mxxk
  • 9,514
  • 5
  • 38
  • 46
1
vote
1 answer

Does Exim 4.94 in Debian 11 have no DMARC/SPF support?

I had Debian 9 server with exim4-daemon-heavy which supported SPF and DMARC. After upgrade to Debian 11 I see that exim4-daemon-heavy does no longer assume supporting those features. Looks like a bad joke. But maybe I don't know something. Could you…
wsdx
  • 145
  • 1
  • 1
  • 8
1
vote
1 answer

how to explain this DMARC SPF failure?

My daily DMARC contains the following record. Can somebody explain the SPF failure? All looks set up correctly on my domain and also the spf validation further in the record passes. I'm a bit puzzled.
jdetaeye
  • 43
  • 1
  • 4
1
vote
1 answer

DMARC without SPF

Although it is not possible to implement a complete DMARC policy with only SPF, due to forwarded emails, is it still possibible to implement a proper DMARC policy with only DKIM?
zer0uno
  • 7,521
  • 13
  • 57
  • 86
1 2
3
10 11