dmarc

来源： https://stackoverflow.com/questions/64396880/postfix-opendmarc-reject-all-mails-5-7-1-rejected-by-dmarc-policy

来源： https://stackoverflow.com/questions/64396880/postfix-opendmarc-reject-all-mails-5-7-1-rejected-by-dmarc-policy

问题 We recently implemented a DMARC record for our domain: "v=DMARC1; p=quarantine; pct=100; rua=mailto:me@mydomain.com" (quarantine 100% of non-authenticated emails and send aggregate report to "me") We use a third-party vendor to issue invites. The vendor sends email from invites@invites.vendordomain.com which is then sent through a mail relay "smtp3.mailrelaydomain.it". I also know that the mail relay uses a single ip address. That address is included in our SPF record: "v=spf1 ...[SNIP

问题 We recently implemented a DMARC record for our domain: "v=DMARC1; p=quarantine; pct=100; rua=mailto:me@mydomain.com" (quarantine 100% of non-authenticated emails and send aggregate report to "me") We use a third-party vendor to issue invites. The vendor sends email from invites@invites.vendordomain.com which is then sent through a mail relay "smtp3.mailrelaydomain.it". I also know that the mail relay uses a single ip address. That address is included in our SPF record: "v=spf1 ...[SNIP

问题 In my setup I have a website (example.app) hosted on Heroku. Then, I use Sendgrid to send emails from the Heroku server to our users that forget their password. The email is registered using Google's Gsuite. So I also send emails from the Google servers. The from email is: <Appname <noreply@example.app> So I thought these should be my DNS records (note I don't have an A-record): CNAMES: example.app CNAME "example.app.herokudns.com" www.example.app CNAME "www.example.app.herokudns.com" SPF:

问题 I have a domain registered at domains.google.com that I use with a G Suite account and also to send email from SES and mailchimp. My DNS records look correct to me (Mailchimp instructions): @ TXT "v=spf1 include:_spf.google.com include:amazonses.com include:servers.mcsv.net ~all" _dmarc TXT "v=DMARC1; p=none; pct=100; rua=mailto:re+aml1ryadtn7@dmarc.postmarkapp.com; sp=none; aspf=r;" I use postmark's nifty service to get a weekly DMARC digest, and they report this error for mailchimp emails:

问题 I have a scenario with 3rd party vendors… Our company has a lot of 3rd party mail services. I have set up the dmarc with p – none and SPF records were updated with known sending servers. Could you please clarify a statement which I read in Dmarc.org site about making 3rd party vendors Dmarc compliant. 1. Either add the 3rd party sending servers to our spf records 2. Or share your DKIM private key to them My question is, SPF checks for envelope from address so when the vendor sends mails on