Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.
Questions tagged [dmarc]
205 questions
1
vote
1 answer
DMARC SPF fails when using PostSRSD
I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To prevent the SPF from these emails from becoming…
John Doe
- 303
- 3
- 14
1
vote
1 answer
DMARC Failing cant figure out why
When sending a message from salesforce.com through my companies domain surgishop.com I am getting a DMARC fail. I believe I have SPF and DKIM correctely configured but could use some help on figureing out why DMARC fails.
Email…
AHCB
- 13
- 3
1
vote
1 answer
Does an SPF SoftFail trigger DMARC reject
I've googled around and even tried to find the answer in the RFC to this one.
For this question, let's assume DKIM will always fail and leave it out of the picture.
If the DMARC policy is p=reject and the SPF is configured to SoftFail (~all), should…
Juicy
- 169
- 5
1
vote
0 answers
What is wrong with this e-mail which is failing SPF(mailfrom) and DMARC?
This is a follow-up from "Why is my opendmarc failing pretty much everything that comes through?". I'm really struggling to understand what is going on.
Outgoing mail is verified correctly by the receiving end (e.g., Gmail). Some incoming mail seems…
Morpheu5
- 259
- 4
- 18
1
vote
1 answer
Can I bypass SPF restrictions by using an SMTP envelope FROM with another domain that has either no SPF record or an invalid one
Consider DMARC record:
v=DMARC1;p=reject;rua=mailto:xyz;ruf=mailto:xyz;adkim=s;aspf=s;pct=100;fo=1;sp=reject
Also consider domain example.com with a TXT record:
v=spf1 include:_spf.google.com -all
Now imagine a third party sends an email using…
David
- 179
- 11
1
vote
1 answer
Can one bypass DMARC policy DKIM requirements simply by not using DKIM or by using an SMTP envelope with a valid DKIM for the envelope from domain
Am I right to say that DMARC has no way to say "all emails must be signed". My understanding here is that I can specify that I want DKIM to be either lax or strict - which I understand to mean that, if the message happens to be signed (consider…
David
- 179
- 11
1
vote
1 answer
Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender "<>"
I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are a number of failing emails being send from my…
jnrcorp
- 125
- 5
1
vote
1 answer
using _report._dmarc. records with sub.domains
I have a sub.domain sending emails.
From: Newsletters@sub.example.com
I have set up the following DMARC record.
_DMARC.sub.example.com TXT "v=DMARC1; p=none; rua=mailto:reports@another.com; ruf=mailto:reports@another.com; fo=1"
I now want to setup…
David Hill
- 11
- 1
1
vote
2 answers
Web-generated emails not compliant with DMARC
We have a classified ads website. Buyers can contact sellers. The message is directly generated on the site (php7) and sent to the user by email.
If we follow the recommandations from openspf, we have these 2 solutions:
Solution 1
Return-path:…
Toto
- 283
- 1
- 4
- 12
1
vote
1 answer
Seemingly valid SRS-processed message is being rejected by gmail servers
I have a virtual private server with its own IP and have configured SPF, DKIM, DMARC, SRS (with postsrsd) and all that jazz. Let's call it domainut.com.
Most things are working, mail is being delivered to gmail --to the spam folder, because the IP…
MariusSiuram
- 131
- 7
1
vote
0 answers
SPF softfail on gmail
I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have looked up email source, and found log like this ( i…
1
vote
1 answer
How to setup SPF and DMARC for satellite hosts?
If I send mail directly from relay host - everything works like a charm. All checks are passed.
Delivered-To: 102@host.me
Received: by 10.100.182.171 with SMTP id t40csp2626933pjb;
Thu, 26 Apr 2018 10:46:48 -0700 (PDT)
X-Google-Smtp-Source:…
Falseclock
- 11
- 2
1
vote
0 answers
mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass
I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up postfix/dovecot but it still ends in spam. And the…
user1998000
- 11
- 1
1
vote
1 answer
DMARC report: SPF fails with mx-domain as spf-domain in auth_result
I have setup a mail server with several postoffices/domains. DKIM, SPF and DMARC are setup for every domain. For the mailserver domain, which is a postoffice as well, I get weird DMARC reports, where the spf auth result lists the mx domain and the…
pgiparsec
- 11
- 3
1
vote
1 answer
Opendmarc connection refused for milter
Debian stretch.
Postfix + dkim + dmarc.
Opendmarc is not working. I'm getting:
Nov 26 10:36:07 mail postfix/smtpd[30012]: warning: connect to Milter service inet:localhost:8893: Connection refused
Relevant configs:
/etc/default/opendmarc
7…
TheEditor
- 231
- 1
- 4
- 15