Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

205 questions
8
votes
2 answers

How many emails can I put in one dmarc record's rua attribute?

How many emails can I put in one dmarc record? Is the following invalid because there are three mailto attributes? All the examples I see online have two addresses at most. "v=DMARC1; p=reject; rua=mailto:pm@dom.com, mailto:dmarc@dom.com, mailto:…
ThisClark
  • 298
  • 2
  • 8
7
votes
2 answers

Receiving DMARC reports for emails I do not send

I am hosting the email for my domain (lets call it example.com) on google apps (free legacy edition). I recently enabled the DMARC reports so I now get a daily report for the emails sent from my domain. My problem is that sometimes I get reports…
DorAga
  • 161
  • 1
  • 1
  • 6
7
votes
3 answers

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with IP 173.203.187.81 DMARC: 'FAIL' ... where 173.203.187.81…
clayRay
  • 181
  • 8
6
votes
1 answer

Is GMAIL incorrectly failing SPF?

0365 mail users are encouraged to use include:spf.protection.outlook.com -all in their SPF record. I have followed this guidance. My company's spf record says: v=spf1 include:spf.protection.outlook.com -all the spf.protection.outlook.com record…
OzPHB
  • 239
  • 2
  • 8
6
votes
2 answers

DMARC reporting unexpected SPF IP but DKIM still passes

I have both SPF and DKIM enabled on my domain. This domain is for a small company and we only have the one server (hMailServer if anyone thinks it's relevant). Recently I decided to enabled DMARC reporting and noticed something very peculiar about…
Fr33dan
  • 133
  • 8
6
votes
2 answers

Designating A DKIM Signer Other Than The "From" Domain

A few months ago, I implemented SPF/DKIM/DMARC for my three-person company. After a trial period, I switched our DMARC to "p=reject", so that emails are rejected if they fail SPF/DKIM. Generally, it works: our emails go through, and based on data…
joseph_morris
  • 235
  • 3
  • 9
6
votes
1 answer

Mail from Teams forwarded to Gmail marked as spam due to DMARC failure

When I write a chat message in Microsoft Teams the receiver gets an e-mail notification on her Office 365 account (receiver@htlvb.at) when she is offline in Teams. The receiver set it up so that all her mails are forwarded to her personal Gmail…
Johannes Egger
  • 173
  • 6
5
votes
1 answer

NOT receiving DMARC reports from AOL / HOTMAIL / MSN / OUTLOOK / LIVE

My DMARC DNS record looks like this: (domain name is redacted) _dmarc.domain.com TXT "v=DMARC1; p=none; sp=none; rua=mailto:dmarc@domain.com; ruf=mailto:dmarc@domain.com; rf=afrf; pct=100; ri=86400" Now, I receive aggregate DMARC and forensic…
agbb
  • 103
  • 6
5
votes
2 answers

how to configuration dkim on exchange email server

Mails sent from our internal email server to public servers such as Gmail, Yahoo and all other external organizations are delivering to spam. We currently use exchange server, in order to tackle above mentioned problem we would like to configure…
enkhtuvshin
  • 51
  • 1
  • 1
  • 2
5
votes
2 answers

SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain

Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended family to a sustainable solution. I'm looking at the option of having them each…
Ozzah
  • 159
  • 2
5
votes
1 answer

Is email deliverability impossible with a .name email address?

I have a dot name domain. .name is an odd TLD: they originally only offered third level domains, eg first.last.name, so that more people could get their own name. They also included the first@last.name email address with each domain registration.…
ryan
  • 246
  • 1
  • 8
4
votes
1 answer

DMARC failing on Mailgun when forwarding occurs

We recently increased to a quarantine policy and are thinking of going to reject - but we stumbled across an issue we can't seem to identify a root cause for. Specifically, forwarded e-mails appear to be having issues and we can't figure out why. We…
Eli
  • 41
  • 3
4
votes
1 answer

How to recover domain name from previous bad SPF record?

TL;DR: We had SPF too permissive (+all) and spammers used this to send tons of spam "from" our domain. We restricted that to ~all and added DMARC (not DKIM though), now other providers do not trust our real emails. How to make them trust our…
Alexey Kamenskiy
  • 774
  • 9
  • 22
4
votes
1 answer

Improve Spam Confidence Level (SCL) for outgoing emails

I have a postfix SMTP server on Ubuntu. I have valid SPF and DKIM records, as verified by the email header my customer received. Authentication-Results: spf=pass (sender IP is XXX.XXX.XXX.XXX) smtp.mailfrom=mydomain.com; hotmail.com; dkim=pass…
Raptor
  • 991
  • 3
  • 16
  • 36
4
votes
1 answer

DMARC: must rua email match domain?

I'm trying to implement DMARC for a domain and the address specified in the rua tag is my own personal email for convenience. I have been receiving aggregate reports only from a handful of ESPs, and all of them minor ones. Notably, I'm receiving…
Bintz
  • 365
  • 1
  • 2
  • 10
1
2
3
…
13 14