Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
205 questions
2
votes
1 answer
Checking DMARC Non-compliance, 4 Examples
We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we have gotten some from Google that showed up as…
mikato
- 121
- 5
2
votes
1 answer
SPF,DKIM Failure and outcome
I have been doing a lot of reading around SPF, DKIM and DMARC and i think i have digested most of the information and how all three work in the email world. However one question i couldn't find is, What will happen to an email if SPF failed and DKIM…
Twin Cam
- 31
- 3
2
votes
1 answer
Disable DKIM in exim for mailing lists
I am subscribed to a number of mailing lists that don't remove my DKIM signature but mutate messages (change From) and add their own DKIM. Resulting messages have 2 DKIM signatures, one failing and one passing.
DMARC is perhaps the biggest problem…
phd
- 123
- 5
2
votes
1 answer
Does bad domain reputation damage IP reputation?
Recently our mail server's reputation has been down rated by Hotmail, according to postmaster/live SNDS-service (from green to yellow and a single day in red). Therefore, me and my colleagues are now running a check of everything send from the mail…
Anne hansen
- 23
- 3
2
votes
1 answer
How to improve DMARC Compliance?
I've been monitoring our DMARC compliance with policy "p=none" for a month or two using both dmarcian and dmarcanalyzer. I've noticed that when we send a large email marketing campaign (10k+ emails), there is a spike in mail that fails DMARC that…
Stephen
- 121
- 3
2
votes
2 answers
Not receiving DMARC reports from major ESPs (gmail, yahoo, hotmail, etc)
I have recently set up a DMARC record for my domain. DMARC record looks like this, only domain name has been redacted:
v=DMARC1; p=none; fo=1; rua=mailto:dmarc-aggregate@domain.com!10m; ruf=mailto:dmarc-forensic@domain.com!10m; sp=reject
I'm…
Bintz
- 365
- 1
- 2
- 10
2
votes
1 answer
DMARC configured to reject - I don't understand this report from Google
I have DKIM and SPF configured, and set in my DMARC record for strict enforcement and policy=reject:
v=DMARC1; p=reject; adkim=s; aspf=s; fo=1; ri=3600; ...
Today I received the following DMARC report from Google
Ex Umbris
- 804
- 7
- 24
2
votes
3 answers
DMARC for AmazonSES fails. Why?
I've setup SPF and DKIM for my custom domain to send emails.
While SPF and DKIM tests pass, the DMARC test fails for emails that have reply-to address different from "From" field.
My SPF record:
v=spf1 include:amazonses.com include:_spf.google.com…
user1537407
- 31
- 2
- 3
2
votes
3 answers
DKIM: Can I simply change the RSA key used in DKIM without changing the DKIM selector?
Can I simply change the RSA key used in DKIM (DNS TXT Record) without changing the DKIM selector or will this result in any issues?
If not, what's them the purpose of the DKIM selector?
BTW: 20120113 is the selector I'm talking about in…
Florian Schneider
- 293
- 3
- 8
2
votes
2 answers
Missing or Invalid DMARC Record in server mail
my main problem is that I am not receiving mails to my domain after adding an MX Server to my domain for mailing in Webmin, and
After testing a server by mxtoolbox.com tool, I found that there is problem in DMARC Records,
it says Missing or Invalid…
Spartan
- 121
- 1
- 5
2
votes
1 answer
Why does Yahoo DMARC Report show DKIM is Valid for emails coming from Google's Servers?
My domain name for the below issue is developcents.com, and I run my own Postfix implementation on CentOS 7.
I've had ongoing issues for several months where emails I send from my mail server (running Postfix on a Linode VPS) are sometimes (not…
David W
- 3,405
- 5
- 34
- 61
2
votes
1 answer
Mail marked as spam (Gmail/Hotmail): IP not on blacklist, DKIM Valid, SPF Valid and DMARC valid
I'm trying to send mail from my own domain (which is 15 days old now) but I'm having some troubles. Check the following mail body:
Delivered-To: ------@gmail.com
Received: by 10.25.89.200 with SMTP id n191csp1613325lfb;
Mon, 15 Jun 2015…
user1226868
- 155
- 7
2
votes
1 answer
Configure postfix to DKIM-sign emails generated from the system
My web hosting server features a Postfix setup up and running. That postfix is also open with STARTTLS on port 587 for authorized users (only me, myself and I right now) to send emails to any domain after signing it with DKIM.
Every email I send via…
usr-local-ΕΨΗΕΛΩΝ
- 2,339
- 7
- 33
- 50
2
votes
1 answer
DKIM & SPF Allignment for Subdomains
We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The subdomain has SPF, DKIM and DMARC TXT records in…
Granwille
- 31
- 2
2
votes
1 answer
(Why) Would email servers stop sending DMARC reports because of DKIM?
I have a personal email server I've been running for years; very seldom has there been a problem with sending mail and so I've never really got up to speed with things like SPF, DMARC, and DKIM. Recently, while upgrading the system, I decided to…
goldilocks
- 197
- 7