Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

205 questions
0
votes
1 answer

DMARC report. A server sending mail/impersonating my domain?

I've recently set up DMARC, SPF and DKIM. I'm now checking all DMARC reports I'm receiving. I've noticed the below entry which looks like an IP which is outside my control (the other IPs mentioned I see daily and are the ISP SMTP). So this one entry…
0
votes
2 answers

DNS record check requested (spf, dkim, dmarc)

Is below correctly setup? I have 1 A record mydomain.com pointing to an ip address. I have a subdomain called www.mydomain.com that also has the PTR record for the ip address (because i'm also going to host mail on it, i want it to helo/ehlo…
ATv
  • 129
  • 1
  • 2
  • 14
0
votes
1 answer

How do email domains of From and Email Authentications (SPF, DKIM, etc) get compared by an email client?

Most of email clients shows "on behalf", "via" suffixes next to "From" email address if its domain differs from domains of Email Authentications ("Return-Path" email's domain for SPF, "d=" key value for DKIM, for instance). This raises…
origaminal
  • 101
  • 2
0
votes
0 answers

Hotmail DMARC reports show errors in DKIM verification, but not always

I set DKIM, SPF and DMARC on my domain. I placed on the DMARC register I want to receive reports to see if my implementation of rules it's ok or not, to set a strict rule to say if something it's wrong the destination server should delete the false…
NetVicious
  • 462
  • 5
  • 17
0
votes
2 answers

Can DMARC apply to email already received?

We have a domain that has been "ruined" by spammers, using it's reputation for sending spam mails. We're moving to a different domain and would like the previous domain to become a "death trap"; marking any new mail using the domain for from:,…
Martijn
  • 346
  • 5
  • 13
0
votes
2 answers

Postfix policyd-spf reject None

How to configure policyd-spf in Postfix to reject domains with no SPF record? The documentation doesn't specify this condition and its needed to reject spoofed/unauthorized emails on an outbound relay. Similar Q&A on Stackoverflow recommends use of…
Pavin Joseph
  • 130
  • 10
0
votes
2 answers

SPF, DKIM and DMARC header order

I just recently set up DMARC on my mail server and in received mails, the order of SPF, DKIM and DMARC headers are strange. Moreover, if DKIM signature missign, there is no DMARC related "Authentication-Results" header at all. Is this correct?…
Halacs
  • 103
  • 4
0
votes
1 answer

SPF redirect to subdomain TXT does not work for Google?

Funny situation, and I'm not sure if this is my fault or Google's. I have a domain, example.com, which has 2 subdomains: main.example.com, and spf.example.com. For main.example.com domain, my TXT record used to be defined as: v=spf1…
StanTastic
  • 810
  • 1
  • 7
  • 24
0
votes
1 answer

Does DMARC send alerts even upon successful delivery?

I keep getting DMARC reports that show that my IP passed all SPF and DKIM checks. Is this just an email to say that everything's fine or is it an indication of a problem? If the latter, there's nothing in that email that would help figure out what…
mwoods
  • 3
  • 2
0
votes
1 answer

DKIM, SPF, DMARC, SPF OK mails are flagged as SPAM

I have a dedicated server running CentOS7 with Postfix, the problem is that all the sent mails are flagged as SPAM by hotmail and gmail despite DKIM, SPF, DomainKeys, DMARC records and keys wich are all OK (See photo1)headers from gmail I'm using…
0
votes
1 answer

SPF, DKIM, DMARC, DomainKeys OK, emails flagged as SPAM

I have a new dedicated server running CentOS7 with Plesk 12.5 with postfix, and i have succesfully set SPF, DKIM, DMARC and DomainKeys as it shows this test from port25.com: ========================================================== Summary of…
0
votes
3 answers

Improving email deliverability: Implementing DKIM and DMARC

I have a messaging system on my app where users can send messages directly to other users straight from my domain (not going through Mailchimp's Mandrill templates or Google Apps). I also have cron jobs that sends users' statistics to about 5,300…
0
votes
1 answer

DNSsec error in Bind9.10 following update of freebsd10.1

My DNSsec began to fail following a ports update. I have reinstalled Bind on both master and slave but the error still persist. 35 ;; WE HAVE MATERIAL, WE NOW DO VALIDATION 36 ;; VERIFYING A RRset for www.ex-mailer.com. with DNSKEY:9381:…
nix
  • 145
  • 4
0
votes
1 answer

Partial DKIM pitfalls?

We've recently implemented DKIM for automated emails sent out from our website (SMTP on static IP). However we cannot implement DKIM for our hosted exchange email accounts (managed hosting sends from a range of IPs). So in the DMARC reports I'm…
0
votes
1 answer

Implementing SPF for a mail server that sends email on its own, with GoDaddy

I have some troubles configuring SPF/DKIM for a VPS with a running instance of Postfix. Thanks to DMARC reports I'm finding and fixing always more issues. Today I have a problem by setting SPF records in GoDaddy for a subdomain that matches the…