Questions tagged [dmarc]
The dmarc tag has no usage guidance.
24
questions
3
votes
2
answers
50
views
Setting up DKIM, SPF, and DMARC Records for Domains that You Won't Use for Email
I have a few domains out there that are never used for email. If you look at the domains, you'll know the company. This makes me wonder, should I set up DMARC, DKIM, and SPF for these domains even ...
- 131
5
votes
2
answers
266
views
Yahoo rejecting email after registrar change
I recently changed registrars and DNS location from Tucows to Cloudflare for one of my domains. During the change, Cloudflare copied my existing DNS records including SPF, DMARC and DKIM keys. The ...
- 3,155
3
votes
2
answers
427
views
Clarification re who sends DMARC reports
I recently migrated my DNS servers and added DMARC entries. However, DMARC reports are completely new to me.
Today I received a DMARC report purportedly from Yahoo, and I'm not sure if I should open ...
- 3,155
4
votes
1
answer
53
views
Does DMARC Add Value Beyond Reports?
I set up an email about 1 year ago with Google Suite, in the process I came under the impression that I should set up DMARC. So I did, but now, I'm trying to clean up my inbox and wonder if DMARC is ...
2
votes
1
answer
242
views
Can I replace rua entry with ruf in DMARC record?
I currently have a DMARC record set up like this:
v=DMARC1; p=none; fo=1; rua=mailto:[email protected] but I am receiving a lot of reports everyday.
I would like to only receive failure reports (...
- 424
3
votes
1
answer
80
views
Intermittent DKIM authentication failing
We are recently deploying DMARC and seeking additional details about an issue. DMARC is configured in the most basic way:
v=DMARC1; p=none; rua=mailto:[email protected]
Our primary server ...
0
votes
1
answer
198
views
Is there any way to create a redirect for a DMARC record?
We have SPF on approx 30 domains configured with a redirect like this:
v=spf1 redirect=_spf.example.com
This simplifies management since changes now only need to happen in one place to affect all of ...
7
votes
1
answer
549
views
How to handle duplicate DKIM selectors?
Background
When using third party tools which send mails from your domain, you often need to setup DKIM records with selectors defined by the third party. E.g. for MailChimp you're asked to setup:
...
- 183
2
votes
0
answers
47
views
Sending email via MailChimp with 2 different "from" emails causes vastly different stats
I have two domains:
abc.example
xyz.example
Both have the same DMARC and DKIM DNS records (relative to their own domain), both have same scores when checking black lists, mail tests sites etc
...
- 254
1
vote
1
answer
297
views
Is DMARC relaxed alignment for SPF/DKIM bad?
After studying authentication mechanisms available to prevent e-mail spoofing, still I don't understand how to choose between the relaxed alignment and the strict alignment in DMARC for SPF and DKIM, ...
- 13
1
vote
1
answer
64
views
Does DMARC help deliverability or is it simply a reporting mechanism?
My client, has SPF and DKIM set up correctly but is having multiple failures when emailing certain organisations when emailing multiple people in the organisation. Recently we asked the Exchange ...
- 133
3
votes
1
answer
328
views
Webform Email Does Not Pass DMARC
I am setting up DMARC, SPF and DKIM records for the first time. I'm using WordPress, Elementor, SiteGround, and Google Workspace.
When submitting a Form from my website, sent from arandomemail@mysite....
4
votes
4
answers
4k
views
Do subdomains inherit DKIM keys? Can a DKIM SDID for one domain be used to validly sign mail that appears to be sent from another domain?
Suppose no DKIM keys are defined for sub.example.com, but a key with selector mykey is defined for example.com; that is, a DKIM record exists at mykey._domainkey.example.com in the DNS. Can <alice@...
- 179
2
votes
1
answer
92
views
DMARC report: systematic SPF failure for a domain
I get DMARC reports sent from various different sources.
All of the reports generally have <result>pass</result> for all of the sections.
However, the reports from Google always have SPF ...
- 185
3
votes
2
answers
465
views
BIMI Validation failure
I have set up a BIMI record for my business, but when checking with 'https://www.mailkit.com/resources/bimi-inspector' I am told that my BIMI record is valid:
default._bimi.domain.co.uk 3600 IN TXT "...
- 185
2
votes
1
answer
2k
views
Why is G Suite passing DMARC when alignment fails?
I have a G Suite account with a primary and secondary domains. I have successfully setup DMARC for my primary domain. Now I am trying to setup DMARC for my secondary domain.
SPF is setup for my ...
- 121
0
votes
1
answer
505
views
Which email servers currently send DMARC aggregate reports - and which do not yet?
I've implemented a DMARC policy for my company's outgoing email. But I'm receiving surprisingly few aggregate reports back. So far only three domains: gmail.com; yahoo.com; emailsrvr.com
Does anyone ...
- 105
1
vote
1
answer
116
views
DKIM fails in DMARC report but not when checked independantly
I've been getting DMARC reports for a new domain I setup saying that the DKIM check is failing. The emails don't get blocked because I haven't set it up to be quarantined or blocked yet.
If I check ...
- 21
1
vote
1
answer
4k
views
DMARC record without rua or ruf entry
I have set up my server with SPF and DKIM and activated DMARC with
v=DMARC1; pct=100; ruf=mailto:[email protected]; rua=mailto:[email protected]; p=reject
So far everything works ...
- 973
3
votes
2
answers
246
views
Doesn't DMARC expose your email address?
G Suite states that one can add a DMARC record with an rua field to get reports about DMARC activity by email:
v=DMARC1; p=reject; rua=mailto:[email protected]
But doesn't this basically ...
- 133
9
votes
2
answers
1k
views
Why is google.com trying to send emails from my domain?
I pulled up a DMARC Analyzer report showing emails received on behalf of my domain:
In addition to my normal authorized (SPF+DKIM aligned) personal emails from the protonmail.ch domain, there are ...
- 15.8k
1
vote
1
answer
62
views
Missing "policy" stated by Yahoo since DMARC implementation?
Since the implementation of DMARC on our server we get feedback reports from Yahoo, stating we do not publish a "policy" which therefore cannot be evaluated (to my understanding).
However the same ...
- 11
3
votes
1
answer
798
views
DMARC failure on forwarded SharePoint Online emails
I have a client that uses SharePoint Online but insists on using Gmail. Each user has a O365 account with an Exchange Online mailbox and mail flow/delivery options are set to forward all incoming mail ...
- 39
2
votes
2
answers
4k
views
MxToolbox says dmarc DNS record is not found despite having one configured with NameCheap
My emails get stuffed into spam folder. I havent sent it to anyone but myself.
MxToolbox displays 1 error:
dmarc DNS Record not found
These are my namecheap configurations regarding dmarc, dkim ...
- 173