I pulled up a DMARC Analyzer report showing emails received on behalf of my domain:
In addition to my normal authorized (SPF+DKIM aligned) personal emails from the
protonmail.ch domain, there are unauthorized emails coming from the
google.com domain. I don't use any Google email services with this domain, and never have.
My domain's DMARC policy is correctly rejecting these unauthorized emails. I know the emails are truly originating from Google and not just random internet noise, because the emails are signed cryptographically by
(Rein has pointed out that they are actually signed by my domain, just forwarded by Google.)
Here is a snippet from a DMARC aggregate report (from Google) that shows two emails coming from one of Google's IPs:
<record> <row> <source_ip>(IP address owned by Google LLC)</source_ip> <count>2</count> <policy_evaluated> <disposition>none</disposition> <dkim>pass</dkim> <spf>fail</spf> </policy_evaluated> </row> <identifiers> <header_from>maxlaumeister.com</header_from> </identifiers> <auth_results> <dkim> <domain>maxlaumeister.com</domain> <result>pass</result> <selector>protonmail</selector> </dkim> <spf> <domain>maxlaumeister.com</domain> <result>fail</result> </spf> </auth_results> </record>
My SPF/DKIM/DMARC records are:
maxlaumeister.com: TXT "v=spf1 include:_spf.protonmail.ch mx -all" protonmail._domainkey.maxlaumeister.com: TXT "v=DKIM1; k=rsa; p=(long key)" _dmarc.maxlaumeister.com: TXT "v=DMARC1; p=reject; rua=mailto:(redacted)@rep.dmarcanalyzer.com,mailto:(redacted)@maxlaumeister.com; ruf=mailto:(redacted)@for.dmarcanalyzer.com,mailto:(redacted)@maxlaumeister.com; fo=1;
My question is: Why is google.com trying to send emails on behalf of my domain in the first place? And could this cause any deliverability problems for my legitimate emails?