We recently increased to a quarantine policy and are thinking of going to reject - but we stumbled across an issue we can't seem to identify a root cause for. Specifically, forwarded e-mails appear to be having issues and we can't figure out why.
We use Mailgun for e-mail management. Our SPF is set to:
v=spf1 include:_spf.google.com include:mailgun.org ~all
And our DMARC is set to:
v=DMARC1;p=quarantine;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=600;rua=mailto:gtc5ysbx@ag.dmarcian.com
Our most recent DMARC report looks as follows (put in as a PDF on one of our domains to preserve formatting for you): https://www.insurancetrendsresearch.com/DMARC_ITR.pdf
I'd love help trying to understand why we are suffering SPF un-alignment? It appears our DKIM and SPF records are ok - as for the most part, everything is making it through - but in some instance, we are failing on forwards (at least DMARCIAN has led us to believe it is only forwards). Wondering why?
To note - we only send mail from Google Apps and from MailGun - nowhere else at the moment.
Thanks,
Eli