Paul M. Beck via dmarc-discuss wrote on 2020-06-21 16:27: > I am new to DMARC But I am seeing summary reports containing DKIM=pass > SPF=fail for server(s) that should not be able to send email on our behalf. > I have seen this for more than one server/domain as I assist with a number of > installations. > > How can another server have my freshly generated DKIM? > > If these are rejections of our outbound email why is it going to google?
This sounds like the recipient is forwarding emails to Gmail. The DKIM signature is valid because it originates from your server. SPF fails because Google sees the recipient's forwarding MTA as sender and does not know the true origin. Regards, Matt
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
