Questions tagged [dmarc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
2 answers
209 views

Clarification re who sends DMARC reports

I recently migrated my DNS servers and added DMARC entries. However, DMARC reports are completely new to me. Today I received a DMARC report purportedly from Yahoo, and I'm not sure if I should open ...
  • 2,888
4 votes
1 answer
43 views

Does DMARC Add Value Beyond Reports?

I set up an email about 1 year ago with Google Suite, in the process I came under the impression that I should set up DMARC. So I did, but now, I'm trying to clean up my inbox and wonder if DMARC is ...
2 votes
1 answer
41 views

Can I replace rua entry with ruf in DMARC record?

I currently have a DMARC record set up like this: v=DMARC1; p=none; fo=1; rua=mailto:hello@example.com but I am receiving a lot of reports everyday. I would like to only receive failure reports (...
3 votes
1 answer
36 views

Intermittent DKIM authentication failing

We are recently deploying DMARC and seeking additional details about an issue. DMARC is configured in the most basic way: v=DMARC1; p=none; rua=mailto:dmarcreports@example.com Our primary server ...
0 votes
1 answer
47 views

Is there any way to create a redirect for a DMARC record?

We have SPF on approx 30 domains configured with a redirect like this: v=spf1 redirect=_spf.example.com This simplifies management since changes now only need to happen in one place to affect all of ...
6 votes
1 answer
112 views

How to handle duplicate DKIM selectors?

Background When using third party tools which send mails from your domain, you often need to setup DKIM records with selectors defined by the third party. E.g. for MailChimp you're asked to setup: ...
2 votes
0 answers
27 views

Sending email via MailChimp with 2 different "from" emails causes vastly different stats

I have two domains: abc.example xyz.example Both have the same DMARC and DKIM DNS records (relative to their own domain), both have same scores when checking black lists, mail tests sites etc ...
  • 254
1 vote
1 answer
155 views

Is DMARC relaxed alignment for SPF/DKIM bad?

After studying authentication mechanisms available to prevent e-mail spoofing, still I don't understand how to choose between the relaxed alignment and the strict alignment in DMARC for SPF and DKIM, ...
  • 13
1 vote
1 answer
40 views

Does DMARC help deliverability or is it simply a reporting mechanism?

My client, has SPF and DKIM set up correctly but is having multiple failures when emailing certain organisations when emailing multiple people in the organisation. Recently we asked the Exchange ...
3 votes
1 answer
144 views

Webform Email Does Not Pass DMARC

I am setting up DMARC, SPF and DKIM records for the first time. I'm using WordPress, Elementor, SiteGround, and Google Workspace. When submitting a Form from my website, sent from arandomemail@mysite....
2 votes
3 answers
2k views

Do subdomains inherit DKIM keys? Can a DKIM SDID for one domain be used to validly sign mail that appears to be sent from another domain?

Suppose no DKIM keys are defined for sub.example.com, but a key with selector mykey is defined for example.com; that is, a DKIM record exists at mykey._domainkey.example.com in the DNS. Can <alice@...
  • 139
2 votes
1 answer
84 views

DMARC report: systematic SPF failure for a domain

I get DMARC reports sent from various different sources. All of the reports generally have <result>pass</result> for all of the sections. However, the reports from Google always have SPF ...
  • 175
3 votes
2 answers
324 views

BIMI Validation failure

I have set up a BIMI record for my business, but when checking with 'https://www.mailkit.com/resources/bimi-inspector' I am told that my BIMI record is valid: default._bimi.domain.co.uk 3600 IN TXT "...
  • 175
2 votes
1 answer
1k views

Why is G Suite passing DMARC when alignment fails?

I have a G Suite account with a primary and secondary domains. I have successfully setup DMARC for my primary domain. Now I am trying to setup DMARC for my secondary domain. SPF is setup for my ...
0 votes
1 answer
227 views

Which email servers currently send DMARC aggregate reports - and which do not yet?

I've implemented a DMARC policy for my company's outgoing email. But I'm receiving surprisingly few aggregate reports back. So far only three domains: gmail.com; yahoo.com; emailsrvr.com Does anyone ...
1 vote
1 answer
111 views

DKIM fails in DMARC report but not when checked independantly

I've been getting DMARC reports for a new domain I setup saying that the DKIM check is failing. The emails don't get blocked because I haven't set it up to be quarantined or blocked yet. If I check ...
  • 21
1 vote
1 answer
3k views

DMARC record without rua or ruf entry

I have set up my server with SPF and DKIM and activated DMARC with v=DMARC1; pct=100; ruf=mailto:postmaster@example.com; rua=mailto:postmater@example.com; p=reject So far everything works ...
  • 973
3 votes
2 answers
107 views

Doesn't DMARC expose your email address?

G Suite states that one can add a DMARC record with an rua field to get reports about DMARC activity by email: v=DMARC1; p=reject; rua=mailto:youremail@example.com But doesn't this basically ...
9 votes
2 answers
1k views

Why is google.com trying to send emails from my domain?

I pulled up a DMARC Analyzer report showing emails received on behalf of my domain: In addition to my normal authorized (SPF+DKIM aligned) personal emails from the protonmail.ch domain, there are ...
1 vote
1 answer
55 views

Missing "policy" stated by Yahoo since DMARC implementation?

Since the implementation of DMARC on our server we get feedback reports from Yahoo, stating we do not publish a "policy" which therefore cannot be evaluated (to my understanding). However the same ...
  • 11
3 votes
1 answer
700 views

DMARC failure on forwarded SharePoint Online emails

I have a client that uses SharePoint Online but insists on using Gmail. Each user has a O365 account with an Exchange Online mailbox and mail flow/delivery options are set to forward all incoming mail ...
  • 39
2 votes
2 answers
4k views

MxToolbox says dmarc DNS record is not found despite having one configured with NameCheap

My emails get stuffed into spam folder. I havent sent it to anyone but myself. MxToolbox displays 1 error: dmarc DNS Record not found These are my namecheap configurations regarding dmarc, dkim ...
  • 173