All Questions
Tagged with dmarc domain-name-system
30
questions
0
votes
1
answer
38
views
DMARC Authentication in SendGrid is expecting a different value from the current one
I have one SendGrid account [email protected], I have been using it to send transactional emails from [email protected]. When I check the account [email protected], I realized that ...
- 357
0
votes
2
answers
39
views
how to add multiple DMARC entries?
I use several different services to send out emails from my domain. I already have a CNAME record for _dmarc.mydomain.com that's set to mydomain.com.dmarc.emldlv.net for one service, however, another ...
- 349
0
votes
0
answers
72
views
DMARC, SPF and DNS wildcards
My domain configuration has one domain and three subdomains, one of which is identical to the mail server's hostname:
example.com
sales.example.com
internal.example.com
mail.example.com
I initially ...
- 267
0
votes
0
answers
82
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
1
answer
167
views
Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?
I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail....
- 23
0
votes
2
answers
356
views
Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails
I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
- 165
-1
votes
1
answer
818
views
DNS Records - CNAME
Quite newbie, so sorry any unconnected data. I am creating a DKIM and SPF records to emulate DMARC as a workaround. An external vendor of us, want to send emails under our domain using a subdomain.
I ...
- 105
1
vote
1
answer
260
views
Apparent DMARC External Validation query failure
I've got multiple domains hosted on a single Linode instance. As a result of some routine anti-spam checking the wonderful mxtoolbox (no affiliation) reports this:
DMARC External Validation External ...
- 195
2
votes
1
answer
741
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 63
7
votes
3
answers
2k
views
Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail
Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail.
When I "View Original Message" in GMail, I see...
SPF: NEUTRAL with ...
- 181
0
votes
1
answer
1k
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
0
votes
1
answer
598
views
How do I add individual mail-sending websites to my SPF record?
My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS:
v=spf1 include:_spf.google.com include:_spf.salesforce.com
include:...
- 1
5
votes
1
answer
6k
views
why is this DMARC failing verification?
I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3).
* Your DKIM signature is valid
* Your message failed the DMARC verification
A DMARC policy ...
- 153
17
votes
2
answers
3k
views
DNS MX/SPF/DMARC records without actuall emails on domain
I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
- 273
0
votes
0
answers
2k
views
Allowing Messages from IP Address DMARC
I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The ...
- 615
1
vote
1
answer
2k
views
Windows DNS and long DKIM keys
One of our third party services that we sends as provided us with a DKIM record that is longer than 255 characters and they won't provide a shorter one. How do I properly use what they've provided ...
- 77
2
votes
1
answer
258
views
what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF
Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding ...
- 251
2
votes
2
answers
6k
views
How do I whitelist another sender (e.g. Sendgrid) for DMARC?
We host our own e-mail but use Sendgrid to send mail on behalf of a few internal PHP services that can't easily handle our mail configuration (e.g. they disallow self-signed certs by default, so ...
- 171
-1
votes
1
answer
127
views
Does record domain "include:" also refers to subdomains?
I have a doubt setting up my SPF record. I would like to know if I set up an include record in the SPF record will also be "including" the subdomains of that principal domain that I have included?.
...
- 11
2
votes
2
answers
565
views
Setup DKIM record without server signing
I'm using on one of my domains as hosting provider 101domain.
I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
- 21
0
votes
1
answer
79
views
Business email alias hijacked
One of the clients I work for has a [email protected] account. I believe it's an alias, and I got an email signing up for a random site (it's a legit site) presumably to test that someone had access to it....
- 117
5
votes
1
answer
2k
views
NOT receiving DMARC reports from AOL / HOTMAIL / MSN / OUTLOOK / LIVE
My DMARC DNS record looks like this: (domain name is redacted)
_dmarc.domain.com TXT "v=DMARC1; p=none; sp=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; rf=afrf;
pct=100; ri=...
- 103
1
vote
1
answer
529
views
Where ARC public key is stored?
Where ARC public key is stored? For DKIM it is [selector]._domainkey.example.org. But for ARC? Is it the same as DKIM and holds in TXT query for domain mentioned above?
Thank you.
0
votes
1
answer
82
views
DMARC un-aligned, by business necessity?
I'm new to DMARC so this may be a silly question (sorry if it is):
Base facts: My company has a primary name and many other "doing business as" (DBA from here on) partnerships. However each of these ...
- 21
0
votes
1
answer
2k
views
How to use Cloudflare CNAME to have a unified DMARC policy?
According to DMARC FAQ it's possible to have a single policy for multiple domains, and that all tools refer to this main policy:
How can I put DMARC records on many domains at once?
Some ...
- 652
1
vote
1
answer
407
views
Can I use DMARC if SPF fails
I'm trying to enable DMARC.
The problem that I see is that since I use 3rd party companies for marketing emails, DMARC SPF fails for those emails because they put email from their own domain into ...
- 341
0
votes
1
answer
73
views
DNSsec error in Bind9.10 following update of freebsd10.1
My DNSsec began to fail following a ports update. I have reinstalled Bind on both master and slave but the error still persist.
35 ;; WE HAVE MATERIAL, WE NOW DO VALIDATION
36 ;; VERIFYING A RRset ...
- 145
46
votes
5
answers
79k
views
Find DKIM and DMARC Records?
Is there a method to find a domain's DKIM and DMARC records using dig or nslookup?
I have attempted to do the following:
dig somedomain.org any
returns many records, but not the known DKIM and ...
- 571
0
votes
1
answer
183
views
Implementing SPF for a mail server that sends email on its own, with GoDaddy
I have some troubles configuring SPF/DKIM for a VPS with a running instance of Postfix. Thanks to DMARC reports I'm finding and fixing always more issues.
Today I have a problem by setting SPF ...
- 2,367
1
vote
1
answer
10k
views
What is wrong in my DKIM setup? I'm getting all fails
I own a domain name
I have implemented SPF and DKIM to avoid my mails being junked. I have also upgraded to DMARC in monitor mode.
Since I received a few failure reports recently I wanted to ...
- 2,367