All Questions
82
questions
0
votes
1
answer
162
views
"Undelivered Mail Returned to Sender: DMARC check failed" from forwarded mails
I'm using Procmail to forward mails to another server.
I'm often getting an error message from the recipient server:
host smtp-in.orange.fr[80.12.26.32] said: 501 5.2.0
y8XgrepnBNXb2 Mail rejete. ...
0
votes
1
answer
79
views
AWS-SES sending from one site, from is another site - will DMARC help or hurt
Alright, to keep this simple:
I have a project that is using AWS's SES to send transactional emails. The project is hosted on one site (let's call it example-site.com), but for reasons, the From: is ...
- 103
0
votes
1
answer
169
views
SPF failing even though source IP is in the SPF record
I've seen (and think I understand) when DMARC checks fail on SPF because, e.g. the email has been forwarded and such like. But I don't think this is the case here. All checks on sites like MXtoolbox ...
- 335
-1
votes
1
answer
88
views
Phishing email but with SPF, DKIM and DMARC in "PASS" status
I received an email from a company that looked fine. Gmail deemed it ok. I checked the domain and the various DMARC, DKIM and SPF headers: they are all in "PASS" status. The sender's IP also ...
- 47
1
vote
1
answer
1k
views
Is it a good idea to add `calendar-server.bounces.google.com` to my SPF record?
I'm trying to maximize my company's email deliverability and DMARC reports tell me we are failing DMARC SPF alignment with calendar-server.bounces.google.com which I suspect is the email server ...
0
votes
0
answers
105
views
Incorrect dmarc record landing some mail in spam
I have just received notice from one of our partners that some of our emails sent via AWS SES are being flagged by their email provider as potential spoof DMARC.
We used route 53 to add all our DNS ...
- 101
0
votes
2
answers
253
views
Sendmail unable to email to specific domain
I have a server running Sendmail and is able to email to all domains except my company's email (company1.com). I have tested to sending to gmail and other email providers with no issues. Sendmail is ...
0
votes
2
answers
150
views
A Non-MX mail server + Google Workspace, is this viable?
I have a domain (example.com) configured for sending and receiving mail using Google Workspace. I need to launch additionally a separate (own) mail server. Switching completely to the new server is ...
- 2,328
0
votes
1
answer
947
views
Should HELO, MAILFROM and From use the same domain?
I configured a mail server a couple of times before and I believe back then I thought
that the answer is "yes."
But I'm about to configure another one, and it seems that I was wrong. Let's ...
- 2,328
1
vote
2
answers
420
views
Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?
I have an issue where email is being marked as spam by Gmail/Google Apps systems.
When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
- 181
0
votes
0
answers
82
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
1
answer
80
views
DKIM and how it relates to DMARC reports
I've been tasked with setting up DKIM, SPF and DMARC for a business. I come from more of a development background, so as a result, I've been a bit confused on how to interpret the DMARC reports I'm ...
- 101
2
votes
1
answer
741
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 63
0
votes
1
answer
786
views
DKIM E-Mail verification - prevent receivers from accepting unsigned emails?
I have set up SPF, DKIM and DMARC in my domain (to the best that I can figure out), but I still can send spoofed emails - without a DKIM signature - and they are accepted (at least when I test with ...
- 2,840
0
votes
0
answers
134
views
Send bulk emails with valid DMARC security
We are implementing a feedback feature in our web application. After completion of an event, we are sending emails requesting feedback and ratings to our visitors.
If we do write the following DMARC ...
0
votes
1
answer
108
views
Managing SPF with multiple users on an email provider
I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
- 9
1
vote
3
answers
501
views
SPF FAIL but DKIM PASS with my own domain
I do not understand the fail results in the following google DMARC report to our domain.
I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes?
<...
- 11
2
votes
1
answer
927
views
DKIM & SPF Allignment for Subdomains
We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
- 131
0
votes
1
answer
1k
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
2
votes
1
answer
304
views
(Why) Would email servers stop sending DMARC reports because of DKIM?
I have a personal email server I've been running for years; very seldom has there been a problem with sending mail and so I've never really got up to speed with things like SPF, DMARC, and DKIM. ...
- 207
0
votes
0
answers
176
views
postfix to gmail silent delivery failure
With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
- 131
17
votes
3
answers
8k
views
SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain
Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended ...
- 279
3
votes
1
answer
2k
views
How is this email passing DMARC?
Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.)
This is disturbing, as it shows as "from foo.com", yet the sender ...
2
votes
1
answer
2k
views
Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?
Domain: franzoni.eu
Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP ...
- 163
0
votes
1
answer
146
views
dmarc reports and invalid sender ip
We sometimes get an aggregated report where some mails fails due to invalid ip. That ip is not allowed to send emails from our domain (I guess it is spam. this IP does not belong to us) - is there any ...
- 247
5
votes
1
answer
6k
views
why is this DMARC failing verification?
I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3).
* Your DKIM signature is valid
* Your message failed the DMARC verification
A DMARC policy ...
- 153
0
votes
1
answer
185
views
Send each email from a different subdomain?
There are clearly benefits of using a subdomain for sending email to protection domain reputation, but is this always true? What about the extreme case, where a spam domain sends every email from a ...
- 133
2
votes
1
answer
417
views
Do I need to tune my DMARC settings (SPF align failure at final delivery)?
I've received my first (ever!) DMARC forensic report, and I'm not sure if it implies I should be setting something differently, or if this is desired behavior, or if it's undesired but there's nothing ...
- 419
17
votes
2
answers
3k
views
DNS MX/SPF/DMARC records without actuall emails on domain
I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
- 273
0
votes
2
answers
2k
views
I try to sent emails from different domain names using one email account and get dmarc=fail
For example, I have:
example.com (in this domain I create account) need.com (additional domain) I want to give the users the ability to send emails as @need.com using alias in accounts settings.
The ...
1
vote
2
answers
435
views
Can somone explain this DMARC report? did it fail or pass? why am i getting these if they passed?
Can anyone tell me what this means? As far as I can tell they all pass, but I dont know if this is yahoo sending me this or my server telling this passed or what. My server I set up DMARC I think
<?...
- 11
6
votes
1
answer
637
views
Is email deliverability impossible with a .name email address?
I have a dot name domain. .name is an odd TLD: they originally only offered third level domains, eg first.last.name, so that more people could get their own name. They also included the first@last....
- 291
7
votes
2
answers
7k
views
DMARC fail, but DKIM and SPF are passing
I am using AWS SES (in sandbox mode) to send an email to a GMail address.
Unfortunately it gets flagged as spam.
Google is nice enough to tell me in the message details that it is a DMARC failure
I ...
- 203
1
vote
1
answer
518
views
Email forwarding SPF and DKIM domains
In preparation for publishing a strict DMARC policy, I've:
Published a reporting-only policy.
Gathered nearly 2 months' worth of reports and uploaded them to dmarcian.
Started analysing them and ...
- 905
0
votes
2
answers
411
views
Some clear instructions on writing the DMARC record
I have been under some pressure to produce the DMARC record for one of our customers. Unfortunately, they do not give me access to the domain vendor and instead repeatedly ask "What should they ...
- 111
5
votes
1
answer
7k
views
Is it a DMARC failure if disposition=none & dkim=fail?
When I get one of these DMARC reports from Google is it because there is a problem? Or is it standard protocol. I am curious because I sent one test email and got this DMARC report to abuse@...
- 173
0
votes
1
answer
218
views
Can I DKIM sign my email without running a server daemon just for that?
I have an email server that is working perfectly.
However, more and more other email servers are getting strict about DKIM signing and DMARC records so I guess I need to finally set that up ...
I am ...
- 221
1
vote
1
answer
504
views
How to resolve "signing key too small" issue from mail-tester
We've recently been having some email delivery issues, so I find myself taking my first dive into the email server set-up world to make sure our emails are arriving as expected.
I ran mail-tester a ...
- 111
1
vote
4
answers
2k
views
Using SPF and DMARC records to combat invalid email subdomains
I have been able to confirm that bad actors are sending emails from nonexistent subdomains of my company's primary domain.
Let's say my primary domain is foo.com. Email is sent from that base ...
- 11
1
vote
1
answer
1k
views
Can I set dmarc to tell receiver to fail if no DKIM signature provided in email?
I set SPF, DKIM and DMARC for my email server. I build my own mail server on my personal computer.
Then I disable signing DKIM signature and send an email to Gmail. Gmail shows SPF pass and DMARC ...
- 349
2
votes
1
answer
258
views
what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF
Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding ...
- 251
0
votes
1
answer
183
views
SPF- and DKIM- align fails on a few emails from a larger batch
We are sending large numbers of emails (hundreds of thousands) mostly for our clients. Of course, we have configures SPF, DKIM, and DMARC records properly for all domains who use us. We pass all tests ...
- 181
2
votes
2
answers
6k
views
How do I whitelist another sender (e.g. Sendgrid) for DMARC?
We host our own e-mail but use Sendgrid to send mail on behalf of a few internal PHP services that can't easily handle our mail configuration (e.g. they disallow self-signed certs by default, so ...
- 171
0
votes
1
answer
57
views
GSuite displaying "via" next to name after DNS change
After changing over to Cloudflare GSuite has been adding "via" next to the names of incoming emails. After a quick Google search I found this:
https://support.google.com/mail/answer/1311182?hl=en
...
- 1
8
votes
2
answers
14k
views
Email server: Remove rua from DMARC DNS entry or stop receiving DMARC reports
I have the following DNS entry for one of my clients email servers:
_dmarc IN TXT "v=DMARC1; p=none; rua=mailto:[email protected]"
This is the only email server I'm administering, which has a ...
- 6,469
0
votes
1
answer
591
views
How did this pass DKIM according to DMARC report?
I recently added a DMARC record for one of my domains. Let's call it mydomain.com:
v=DMARC1;p=none;rua=mailto:[email protected];ruf=mailto:[email protected];fo=1"
I have been ...
- 689
0
votes
1
answer
665
views
dmarc. Why do I receive failed SPF or DKIM authentication reports for forwarders?
I set _dmarc to see my email authentication reports (in case it fails).
like that
"v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected]"
And I receive these reports form Google.
a ...
8
votes
2
answers
3k
views
DMARC test failed but we didn't find any obvious reason why; DMARC not passing while SPF and DKIM do
About 7 days ago, I found out on https://www.mail-tester.com that sometimes (50% of my tries over a couple of days) my company email does not pass DMARC test. As it states it does not know why, I am ...
- 499
1
vote
1
answer
4k
views
Whats the purpose of getting daily DMARC reports from google about my Mail Server?
I've been getting DMARC reports from google everyday after setting this up on my domain to prevent domain spoofing. Do I really need to have this daily report? I've never opened the attached zip file ...
- 239
2
votes
2
answers
3k
views
Why am I only receiving DMARC aggregate reports from Google?
I have configured SPF, DKIM, and DMARC for a couple of domains that use G Suite as an email/office suite provider. Everything is looking great so far, except for some reason Google is the only ...
- 27