Questions tagged [dmarc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
131 views

Postmaster: DMARC PASS, DKIM PASS, SPF FAIL, on postmaster

We are setting up our domain to meet gmails new policy. Our company domain passed DMARC and DKIM but failing SPF on postmaster. The success rate of SPF is 0%. The header of the received emails from ...
Kobayashi's user avatar
3 votes
2 answers
94 views

Setting up DKIM, SPF, and DMARC Records for Domains that You Won't Use for Email

I have a few domains out there that are never used for email. If you look at the domains, you'll know the company. This makes me wonder, should I set up DMARC, DKIM, and SPF for these domains even ...
Varinia Devorah's user avatar
5 votes
2 answers
346 views

Yahoo rejecting email after registrar change

I recently changed registrars and DNS location from Tucows to Cloudflare for one of my domains. During the change, Cloudflare copied my existing DNS records including SPF, DMARC and DKIM keys. The ...
Trebor's user avatar
  • 3,270
3 votes
2 answers
608 views

Clarification re who sends DMARC reports

I recently migrated my DNS servers and added DMARC entries. However, DMARC reports are completely new to me. Today I received a DMARC report purportedly from Yahoo, and I'm not sure if I should open ...
Trebor's user avatar
  • 3,270
4 votes
3 answers
86 views

Does DMARC Add Value Beyond Reports?

I set up an email about 1 year ago with Google Suite, in the process I came under the impression that I should set up DMARC. So I did, but now, I'm trying to clean up my inbox and wonder if DMARC is ...
Nate Gervenak's user avatar
2 votes
1 answer
370 views

Can I replace rua entry with ruf in DMARC record?

I currently have a DMARC record set up like this: v=DMARC1; p=none; fo=1; rua=mailto:[email protected] but I am receiving a lot of reports everyday. I would like to only receive failure reports (...
user1448031's user avatar
3 votes
1 answer
104 views

Intermittent DKIM authentication failing

We are recently deploying DMARC and seeking additional details about an issue. DMARC is configured in the most basic way: v=DMARC1; p=none; rua=mailto:[email protected] Our primary server ...
Eaten by a Grue's user avatar
0 votes
1 answer
288 views

Is there any way to create a redirect for a DMARC record?

We have SPF on approx 30 domains configured with a redirect like this: v=spf1 redirect=_spf.example.com This simplifies management since changes now only need to happen in one place to affect all of ...
Eaten by a Grue's user avatar
7 votes
1 answer
944 views

How to handle duplicate DKIM selectors?

Background When using third party tools which send mails from your domain, you often need to setup DKIM records with selectors defined by the third party. E.g. for MailChimp you're asked to setup: ...
JohnLBevan's user avatar
2 votes
0 answers
74 views

Sending email via MailChimp with 2 different "from" emails causes vastly different stats

I have two domains: abc.example xyz.example Both have the same DMARC and DKIM DNS records (relative to their own domain), both have same scores when checking black lists, mail tests sites etc ...
pee2pee's user avatar
  • 254
1 vote
1 answer
380 views

Is DMARC relaxed alignment for SPF/DKIM bad?

After studying authentication mechanisms available to prevent e-mail spoofing, still I don't understand how to choose between the relaxed alignment and the strict alignment in DMARC for SPF and DKIM, ...
Vincent's user avatar
  • 13
1 vote
1 answer
85 views

Does DMARC help deliverability or is it simply a reporting mechanism?

My client, has SPF and DKIM set up correctly but is having multiple failures when emailing certain organisations when emailing multiple people in the organisation. Recently we asked the Exchange ...
Chris Pink's user avatar
3 votes
1 answer
409 views

Webform Email Does Not Pass DMARC

I am setting up DMARC, SPF and DKIM records for the first time. I'm using WordPress, Elementor, SiteGround, and Google Workspace. When submitting a Form from my website, sent from arandomemail@mysite....
Nate Gervenak's user avatar
4 votes
4 answers
5k views

Do subdomains inherit DKIM keys? Can a DKIM SDID for one domain be used to validly sign mail that appears to be sent from another domain?

Suppose no DKIM keys are defined for sub.example.com, but a key with selector mykey is defined for example.com; that is, a DKIM record exists at mykey._domainkey.example.com in the DNS. Can <alice@...
Jivan Pal's user avatar
  • 179
2 votes
1 answer
97 views

DMARC report: systematic SPF failure for a domain

I get DMARC reports sent from various different sources. All of the reports generally have <result>pass</result> for all of the sections. However, the reports from Google always have SPF ...
SupGen's user avatar
  • 185
3 votes
2 answers
515 views

BIMI Validation failure

I have set up a BIMI record for my business, but when checking with 'https://www.mailkit.com/resources/bimi-inspector' I am told that my BIMI record is valid: default._bimi.domain.co.uk 3600 IN TXT "...
SupGen's user avatar
  • 185
2 votes
1 answer
2k views

Why is G Suite passing DMARC when alignment fails?

I have a G Suite account with a primary and secondary domains. I have successfully setup DMARC for my primary domain. Now I am trying to setup DMARC for my secondary domain. SPF is setup for my ...
Matt Houser's user avatar
0 votes
1 answer
684 views

Which email servers currently send DMARC aggregate reports - and which do not yet?

I've implemented a DMARC policy for my company's outgoing email. But I'm receiving surprisingly few aggregate reports back. So far only three domains: gmail.com; yahoo.com; emailsrvr.com Does anyone ...
Cornelius Roemer's user avatar
1 vote
1 answer
121 views

DKIM fails in DMARC report but not when checked independantly

I've been getting DMARC reports for a new domain I setup saying that the DKIM check is failing. The emails don't get blocked because I haven't set it up to be quarantined or blocked yet. If I check ...
pkntl's user avatar
  • 21
1 vote
1 answer
5k views

DMARC record without rua or ruf entry

I have set up my server with SPF and DKIM and activated DMARC with v=DMARC1; pct=100; ruf=mailto:[email protected]; rua=mailto:[email protected]; p=reject So far everything works ...
Pit's user avatar
  • 963
3 votes
3 answers
423 views

Doesn't DMARC expose your email address?

G Suite states that one can add a DMARC record with an rua field to get reports about DMARC activity by email: v=DMARC1; p=reject; rua=mailto:[email protected] But doesn't this basically ...
Molten Ice's user avatar
9 votes
2 answers
2k views

Why is google.com trying to send emails from my domain?

I pulled up a DMARC Analyzer report showing emails received on behalf of my domain: In addition to my normal authorized (SPF+DKIM aligned) personal emails from the protonmail.ch domain, there are ...
Maximillian Laumeister's user avatar
1 vote
1 answer
72 views

Missing "policy" stated by Yahoo since DMARC implementation?

Since the implementation of DMARC on our server we get feedback reports from Yahoo, stating we do not publish a "policy" which therefore cannot be evaluated (to my understanding). However the same ...
Erich's user avatar
  • 11
3 votes
1 answer
845 views

DMARC failure on forwarded SharePoint Online emails

I have a client that uses SharePoint Online but insists on using Gmail. Each user has a O365 account with an Exchange Online mailbox and mail flow/delivery options are set to forward all incoming mail ...
WillSL's user avatar
  • 39
2 votes
2 answers
5k views

MxToolbox says dmarc DNS record is not found despite having one configured with NameCheap

My emails get stuffed into spam folder. I havent sent it to anyone but myself. MxToolbox displays 1 error: dmarc DNS Record not found These are my namecheap configurations regarding dmarc, dkim ...
sanjihan's user avatar
  • 173