Skip to main content

DMARC Question

keat63
I finally decided to apply DMARC yesterday, currently configured as 'none' This morning I recieved 4 emails from Yahoo. Yahoo! Inc. postmaster@dmarc.yahoo.com 1554166736.823249 1554076800 1554163199 domain.co.uk r r

none

100 xxx.xxx.xxx.xxx 2 none pass pass domain.co.uk domain.co.uk pass domain.co.uk pass
I assume that these are notifications that emails sent (by staff members) got to the intended recipient ? Am I going to keep getting these ? Have I just opened a can of worms and created myself more work.

Comments

8 comments

Date Votes
  • keat63
    For anyone interested, this site is handy for understanding these dmarc reports. dmarcian - XML to Human Converter
    0
  • Jean Boudreau
    I had DMARC enable for a few months on a domain. Just like you it was setup with 'none'. Never received emails from Yahoo like you have received. Is it still ongoing? I've used dmarcian also to test my DMARC and had no errors. Thanks for sharing the link.
    0
  • cPanelLauren
    The explanation of what DMARC does here: should be helpful. In this case, the report you're receiving is the report and is normal based on the record you have in place I'd assume. What is the DMARC record you have (removing any identifying information of course)
    0
  • keat63
    I had 4 emails yesterday, from yahoo, Sky, BT and AOL. Same again this morning, all arrived at the same time, all the exact same format and file naming convention, so I'm assuming all utilise Yahoo. Of the ones I interrogated yesterday, they all went along the same lines as the attached image. Nothing that I can see to indicate any failures
    0
  • Jean Boudreau
    Hello, You would received those reports(fo=1) daily(ri=3600) if you use the "rua" in your dmarc. Here's mine and I do received daily XML from Google and the important part is that it shoud "Pass" all test: [QUOTE]v=DMARC1; p=none; sp=none; adkim=r; fo=1; ri=3600; rua=mailto:dmarc@domain.com; ruf=mailto:dmarc@domain.com
    • rua description: List of URIs for receivers to send XML feedback to. URIs are required to be added in the format of 'mailto:address@example.com'.
    • fo description: Forensic reporting options. The value of this tag is a colon-separated list of characters. Possible values: (0) to generate reports if all underlying authentication mechanisms fail to produce a DMARC pass result, (1) to generate reports if any mechanisms fail, (d) to generate report if DKIM signature failed to verify, (s) if SPF failed. If no ruf tag is specified, this tag will be ignored.
    • ri description: The reporting interval for how often you'd like to receive aggregate XML reports. You'll likely receive reports once a day regardless of this setting.
    I received daily report because I have a mechanisms that is failing: DMARC Policy Not Enabled which is "p=none". That's why I will received a daily email until I change "ri" or fix the policy(p=none). You can use Network Tools: DNS,IP,Email to check you domain and select DMARC lookup in the dropdown list.
    0
  • keat63
    I intend to switch to quarantine when i'm happy that DMARC is not causing any issues. I may have to look at moving the RUA to a different email address though, as i'm getting about 10 per day.
    0
  • keat63
    On thursday I sent a large number of news letter emails to our customers, I use mailchimp for this. Maichimp requires a valid email address to receive bounces, unsubscriptions etc, so I use one on our domain. Over the weekend, I received a few hundred DMARK reports, far too many to even consider worrying about or trying to decipher. In hindsight, it's quite obvious what happened, becuase mailchimp was using a return address of my domain, these probably all failed DMARK. Heaven knows if this had any bearing on the delievery of emails. My Dmark is currently using the 'none' protocol.
    0
  • MikaelJK
    Hello, You would received those reports(fo=1) daily(ri=3600) if you use the "rua" in your dmarc. Here's mine and I do received daily XML from Google and the important part is that it shoud "Pass" all test: You can use DMARC lookup in the dropdown list.

    As far as I know the same result you can find if you will use antivirus with DMARC protection.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post