Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

205 questions
0
votes
1 answer

I think I have a DMARC failure, posting to one list-server. The reports list my post under "forwarded," but the detail lines show mostly "reject"

I've recently implemented DMARC where I work. Most of the list-servers work just fine, either rewriting the from address or passing my posts unchanged, so they pass DKIM. One of them appears to be a problem, though. When I look at the DMARC report,…
hbquikcomjamesl
  • 219
  • 1
  • 13
0
votes
1 answer

DMARC report with passing O365 DKIM signature being sent by Google server

The dmarc report values are as follows: dkim_domain : mydomain.onmicrosoft.com dkim_result : pass selector : selector1-mydomain-onmicrosoft-com header_from : mydomain spf_domain : mydomain spf_result : fail source_ip : 209.85.219.70 (this is a…
Adam Winter
  • 119
  • 6
0
votes
1 answer

DMARC quarantine and reject policy algorithm

If I update my DMARC policy to quarantine or reject, do email receivers check both the SPF and DKIM verification checks or just one? Or is it implementation dependent, i.e. email receivers can implement in varying ways? I have been monitoring DMARC…
n00b
  • 103
  • 3
0
votes
1 answer

Send each email from a different subdomain?

There are clearly benefits of using a subdomain for sending email to protection domain reputation, but is this always true? What about the extreme case, where a spam domain sends every email from a distinct subdomain?
rosstex
  • 123
  • 1
  • 5
0
votes
2 answers

I try to sent emails from different domain names using one email account and get dmarc=fail

For example, I have: example.com (in this domain I create account) need.com (additional domain) I want to give the users the ability to send emails as @need.com using alias in accounts settings. The problem is that all messages go to spam with DMARC…
Vasyl Kolomiets
  • 1
  • 1
0
votes
0 answers

Allowing Messages from IP Address DMARC

I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The messages leave the network and come back in, but…
RLBChrisBriant
  • 493
  • 1
  • 6
  • 20
0
votes
1 answer

Is everything OK based on this DMARC report?

Do I understand it correct that everything is OK and I have both SPF and DKIM configured correctly based on this report from Google? google.com …
IvanD
  • 103
  • 2
0
votes
1 answer

Google DMARC reports for Google servers?

Each day I get a DMARC report from Google. They include records for our own outgoing emails, various 3rd party partners we've authorized to send on our behalf, and various spammers trying to spoof our domain. But here's something strange: they also…
HiredMind
  • 101
  • 3
0
votes
1 answer

Is it likely that RUF reports can be used to generate negative reputation for my server?

I recently enabled RUF reports for those requesting them, and it occurred to me that if someone wanted to, they could force my server to generate a lot of RUF reports for various domains. Assuming my server is configured correctly, is it likely that…
Paul
  • 2,755
  • 6
  • 24
  • 35
0
votes
3 answers

AWS SES requirements on custom MAIL FROM domain

According to the docs, AWS SES has some requirements on what is an allowable MAIL FROM domain: The subdomain you use for your MAIL FROM domain has to meet the following requirements: The MAIL FROM domain has to be a subdomain of the verified…
user2959071
  • 3
  • 2
0
votes
1 answer

How does Dmarc alignment protect against anything?

I am specifically referring to Dmarc SPF alignment. To get a Dmarc pass result, all it takes is that either SPF or DKIM aligns. Let us say that I am an attacker, and try to impersonate abc.com. I have not set up DKIM which means I'm going to fail…
pHeoz
  • 163
  • 7
0
votes
2 answers

Some clear instructions on writing the DMARC record

I have been under some pressure to produce the DMARC record for one of our customers. Unfortunately, they do not give me access to the domain vendor and instead repeatedly ask "What should they write in their order?". I am not a domain expert. This…
Disasterkid
  • 111
  • 3
0
votes
1 answer

emails to Yahoo are ending up in SPAM folder despite spf=pass, dkim=pass and dmarc=pass

Are we possibility having a reputation problems with Yahoo emails? Yahoo raw mail header finds my policy I published: dmarc=success(p=REJECT,sp=REJECT) Emails to clients at Google and Outlook are not ending up in spam, but Yahoo is. Finally a week…
MeSo2
  • 204
  • 3
  • 15
0
votes
1 answer

VERP: rewrite from header of NDR?

We provide cmail delivery for external clients from several different domains. We rewrite the envelope sender (AKA: "SMTP MAIL FROM","Return-Path" ) using a form of VERP. Thus we receive all the late bounces and have responsibility to forward them…
Jasen
  • 621
  • 5
  • 12
0
votes
1 answer

Can I DKIM sign my email without running a server daemon just for that?

I have an email server that is working perfectly. However, more and more other email servers are getting strict about DKIM signing and DMARC records so I guess I need to finally set that up ... I am running a bind9 DNS server (works perfectly) and a…
user227963
  • 199
  • 1
  • 2
  • 11
1 2 3
…
13
14