Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
205 questions
2
votes
1 answer
Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?
Domain: franzoni.eu
Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP to send with aliased source addresses) I setup…
Alan Franzoni
- 143
- 6
2
votes
1 answer
Why does spf fail in DMARC report from Google?
I recently received a DMARC report from Google alerting me of a few SPF failures with mail originating from IP addresses belonging to Amazon SES. A sample record is as follows (I have replaced our domain with example.com.):
…
Leo Galleguillos
- 147
- 7
2
votes
0 answers
Google G Suite DMARC + SPF + DKIM for user domain aliases fail Google Admin Toolbox CheckMX
I have set up the above in my Google's old G-Suite account for a User Domain Alias but am still getting two warning messages:
https://webcoder.co.uk
There were some non-critical problems detected with the configuration of this domain.
Depending on…
webcoder.co.uk
- 21
- 2
2
votes
1 answer
Do I need to tune my DMARC settings (SPF align failure at final delivery)?
I've received my first (ever!) DMARC forensic report, and I'm not sure if it implies I should be setting something differently, or if this is desired behavior, or if it's undesired but there's nothing to be done.
The actual report…
philolegein
- 369
- 3
- 9
2
votes
1 answer
DKIM Key Rotation Best Practices
Do you find it necessary to regenerate your DKIM keys every 1-6 months to avoid your mail going into the receiving servers' junk mail folder?
Some guides recommend this, some even say it's "Best Practice" to do so, but most other guides don't…
Jeff
- 1,406
- 3
- 26
- 46
2
votes
1 answer
Is SPF alignment important with DMARC?
When setting up a DMARC policy for an organization, is it important at all to have SPF alignment?
I've gathered that:
Most email service providers support DKIM for a custom domain.
Not all email service providers support SPF for a custom domain.…
Ralf
- 169
- 7
2
votes
1 answer
what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF
Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding rules and other sorts of implementation details…
Glyph
- 241
- 1
- 9
2
votes
1 answer
DMARC strict vs relaxed alignment?
I've been configuring DNS records for a mail server and got stuck when it came to DMARC's alignments.
I know that both relaxed and strict are valid options, as well as relaxed being default setting. However, I am wondering if there is a commonly…
user305491
1
vote
1 answer
DMARC Report: Sometimes DKIM Fails for Mail Server IP
What does it mean when some DMARC records indicate a failure for the correct server:
1.2.3.4
8
none
…
Louis Waweru
- 695
- 9
- 26
1
vote
2 answers
How to set Exim envelope domain to From domain
I've set up DKIM on Exim with the domain set like:
DKIM_DOMAIN = ${sender_address_domain}
However, the domain is always set to the same domain (my primary domain), which causes DMARC validation to fail, because of alignment, when sending emails for…
Sam Bull
- 297
- 4
- 12
1
vote
2 answers
How to read this DMARC report? Why does Yahoo still reject mails from my server?
I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on behalf of my domain, and even a reverse DNS…
Shaul Behr
- 171
- 1
- 5
- 13
1
vote
1 answer
Gsuite DMARC SPF Setup Failure
I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC reports from Postmark still show 70% of messages as…
AudRE
- 11
- 2
1
vote
2 answers
SPF authentication mixed pass/fail without SPF record, in DMARC report
I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows only mail from my MTA as passing. …
TSG
- 1,634
- 6
- 29
- 51
1
vote
1 answer
Is it possible to configure DMARC to only receive reports for main domain and not sub domains?
The question is pretty much in the title.
I have a domain, which has a subdomain with it's own DMARC record. The subdomain marketing.xxx.com is managed by a third-party and they handle the DMARC reports for their subdomain by themself.
I now want to…
s1lv3r
- 1,155
- 1
- 14
- 24
1
vote
1 answer
How to install opendmarc on Debian Wheezy
How can I install opendmarc on Debian Wheezy?
I have tried:
~ $ echo 'deb http://ftp.debian.org/debian wheezy-backports main contrib' >> /etc/apt/sources.list
~ $ apt-get update
~ $ apt-get install opendmarc
But it's unable to find the…
takeshin
- 1,431
- 3
- 19
- 28