Questions tagged [dmarc]
The dmarc tag has no usage guidance.
24
questions
5
votes
2
answers
94
views
Yahoo rejecting email after registrar change
I recently changed registrars and DNS location from Tucows to Cloudflare for one of my domains. During the change, Cloudflare copied my existing DNS records including SPF, DMARC and DKIM keys. The ...
- 3,003
0
votes
0
answers
18
views
Only send DMARC reports from one of the email servers listed in SPF
We have multiple mail servers in our SPF entry. We've added a DMARC entry, but it is receiving reports from all mail servers in the SPF entry - is it possible to set DMARC up to only receive reports ...
- 96.7k
6
votes
1
answer
186
views
How to handle duplicate DKIM selectors?
Background
When using third party tools which send mails from your domain, you often need to setup DKIM records with selectors defined by the third party. E.g. for MailChimp you're asked to setup:
...
- 91
3
votes
1
answer
47
views
Intermittent DKIM authentication failing
We are recently deploying DMARC and seeking additional details about an issue. DMARC is configured in the most basic way:
v=DMARC1; p=none; rua=mailto:dmarcreports@example.com
Our primary server ...
- 91
4
votes
1
answer
47
views
Does DMARC Add Value Beyond Reports?
I set up an email about 1 year ago with Google Suite, in the process I came under the impression that I should set up DMARC. So I did, but now, I'm trying to clean up my inbox and wonder if DMARC is ...
- 91
3
votes
2
answers
258
views
Clarification re who sends DMARC reports
I recently migrated my DNS servers and added DMARC entries. However, DMARC reports are completely new to me.
Today I received a DMARC report purportedly from Yahoo, and I'm not sure if I should open ...
- 91
2
votes
1
answer
99
views
Can I replace rua entry with ruf in DMARC record?
I currently have a DMARC record set up like this:
v=DMARC1; p=none; fo=1; rua=mailto:hello@example.com but I am receiving a lot of reports everyday.
I would like to only receive failure reports (...
- 15.3k
0
votes
1
answer
92
views
Is there any way to create a redirect for a DMARC record?
We have SPF on approx 30 domains configured with a redirect like this:
v=spf1 redirect=_spf.example.com
This simplifies management since changes now only need to happen in one place to affect all of ...
- 8,142
3
votes
1
answer
212
views
Webform Email Does Not Pass DMARC
I am setting up DMARC, SPF and DKIM records for the first time. I'm using WordPress, Elementor, SiteGround, and Google Workspace.
When submitting a Form from my website, sent from arandomemail@mysite....
CommunityBot
- 1
2
votes
1
answer
87
views
DMARC report: systematic SPF failure for a domain
I get DMARC reports sent from various different sources.
All of the reports generally have <result>pass</result> for all of the sections.
However, the reports from Google always have SPF ...
CommunityBot
- 1
2
votes
0
answers
27
views
Sending email via MailChimp with 2 different "from" emails causes vastly different stats
I have two domains:
abc.example
xyz.example
Both have the same DMARC and DKIM DNS records (relative to their own domain), both have same scores when checking black lists, mail tests sites etc
...
- 96.7k
1
vote
1
answer
46
views
Does DMARC help deliverability or is it simply a reporting mechanism?
My client, has SPF and DKIM set up correctly but is having multiple failures when emailing certain organisations when emailing multiple people in the organisation. Recently we asked the Exchange ...
- 21
1
vote
1
answer
182
views
Is DMARC relaxed alignment for SPF/DKIM bad?
After studying authentication mechanisms available to prevent e-mail spoofing, still I don't understand how to choose between the relaxed alignment and the strict alignment in DMARC for SPF and DKIM, ...
- 451
2
votes
3
answers
2k
views
Do subdomains inherit DKIM keys? Can a DKIM SDID for one domain be used to validly sign mail that appears to be sent from another domain?
Suppose no DKIM keys are defined for sub.example.com, but a key with selector mykey is defined for example.com; that is, a DKIM record exists at mykey._domainkey.example.com in the DNS. Can <alice@...
- 8,142
2
votes
1
answer
2k
views
Why is G Suite passing DMARC when alignment fails?
I have a G Suite account with a primary and secondary domains. I have successfully setup DMARC for my primary domain. Now I am trying to setup DMARC for my secondary domain.
SPF is setup for my ...
CommunityBot
- 1
3
votes
2
answers
377
views
BIMI Validation failure
I have set up a BIMI record for my business, but when checking with 'https://www.mailkit.com/resources/bimi-inspector' I am told that my BIMI record is valid:
default._bimi.domain.co.uk 3600 IN TXT "...
3
votes
1
answer
742
views
DMARC failure on forwarded SharePoint Online emails
I have a client that uses SharePoint Online but insists on using Gmail. Each user has a O365 account with an Exchange Online mailbox and mail flow/delivery options are set to forward all incoming mail ...
- 96.7k
0
votes
1
answer
309
views
Which email servers currently send DMARC aggregate reports - and which do not yet?
I've implemented a DMARC policy for my company's outgoing email. But I'm receiving surprisingly few aggregate reports back. So far only three domains: gmail.com; yahoo.com; emailsrvr.com
Does anyone ...
- 451
1
vote
1
answer
114
views
DKIM fails in DMARC report but not when checked independantly
I've been getting DMARC reports for a new domain I setup saying that the DKIM check is failing. The emails don't get blocked because I haven't set it up to be quarantined or blocked yet.
If I check ...
- 21
9
votes
2
answers
1k
views
Why is google.com trying to send emails from my domain?
I pulled up a DMARC Analyzer report showing emails received on behalf of my domain:
In addition to my normal authorized (SPF+DKIM aligned) personal emails from the protonmail.ch domain, there are ...
- 15.3k
1
vote
1
answer
3k
views
DMARC record without rua or ruf entry
I have set up my server with SPF and DKIM and activated DMARC with
v=DMARC1; pct=100; ruf=mailto:postmaster@example.com; rua=mailto:postmater@example.com; p=reject
So far everything works ...
- 15.3k
3
votes
2
answers
140
views
Doesn't DMARC expose your email address?
G Suite states that one can add a DMARC record with an rua field to get reports about DMARC activity by email:
v=DMARC1; p=reject; rua=mailto:youremail@example.com
But doesn't this basically ...
- 451
1
vote
1
answer
56
views
Missing "policy" stated by Yahoo since DMARC implementation?
Since the implementation of DMARC on our server we get feedback reports from Yahoo, stating we do not publish a "policy" which therefore cannot be evaluated (to my understanding).
However the same ...
- 451
2
votes
2
answers
4k
views
MxToolbox says dmarc DNS record is not found despite having one configured with NameCheap
My emails get stuffed into spam folder. I havent sent it to anyone but myself.
MxToolbox displays 1 error:
dmarc DNS Record not found
These are my namecheap configurations regarding dmarc, dkim ...
- 151