[dmarc-discuss] Hotmail DMARC record issue

[Randal Pinto via dmarc-discuss]

Anyone from Microsoft in the list?

Our monitoring system reported last night that Hotmail changed its DMARC
record and in the process a duplicate entry was created which might cause
unpredictable behaviour.

; <<>> DiG 9.10.6 <<>> txt _dmarc.hotmail.com

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23075

;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0


;; QUESTION SECTION:

;_dmarc.hotmail.com. IN TXT


;; ANSWER SECTION:

_dmarc.hotmail.com. 300 IN TXT "v=DMARC1; p=none; rua=mailto:d...@rua.agari.com
;ruf=mailto:d...@ruf.agari.com;fo=1:s:d;

_dmarc.hotmail.com. 300 IN TXT "v=DMARC1; p=reject; pct=100; rua=mailto:
d...@rua.agari.com; ruf=mailto:d...@ruf.agari.com; fo=1"

This is the case for .com and all other TLDs.

As I still have my 20-year-old Hotmail account I am an interested party :)

Best,
Randal

-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

-- 


Red Sift is the power behind OnDMARC and OnINBOX.

You can find us at 21A 
Noel Street, 4th Floor, London, W1F 8GR.




Red Sift is a limited company 
registered in England and Wales. Registered number: 09240956. Registered 
office: Kemp House, 152 City Road, London, EC1V 2NX.

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] Substituted Source IP question

[Randal Pinto via dmarc-discuss]

Very common Edward. You’ll also see this when you email distribution lists or 
when people have forwarding rules setup on their inboxes. These are situations 
where DKIM is required for a successful DMARC validation.

Best,
Randal
https://redsift.com


> On 17 Nov 2018, at 18:32, Edward Siewick via dmarc-discuss 
>  wrote:
> 
> ---
> Authentication: pass
> Contents: pass
> Trust: warn
> ---
> * Message scanned by OnINBOX from Red Sift *
> 
> 
> I'm requesting insights on an oddity in impacting the Source IP appearing in 
> received RUA reports.
> 
> A university receiving my organization's emails is sending RUAs that identify 
> the university's own mailhosts as the Source IP for the messages.  The DKIM 
> domain reflects my organization's named domains. Their explanation is that 
> the mail is being forwarded internally from an external facing AWS-hosted 
> mailhost to a gmail service that handles their end user mailboxes.
> 
> The resulting records in the RUA reports look rather hinky to me. I have an 
> opportunity to discuss the matter with the university's software engineer 
> responsible for this. So insights on whether RUAs with other than the true 
> original Source IP is commonplace would be helpful.
> 
> Edward
> 
> -- 
> 
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)

-- 


Red Sift is the power behind OnDMARC

You can find us at 20 Air Street, 
4th Floor at Wayra, London, W1B 5AN




Red Sift is a limited company 
registered in England and Wales. Registered number: 09240956. Registered 
office: Kemp House, 152 City Road, London, EC1V 2NX.


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] MS mail servers (outlook, office365)

[Randal Pinto via dmarc-discuss]

Anyone else from Microsoft on this list that could comment on why the
decision not to support DMARC reports? Terry seems to have left Microsoft
last month.

On 14 July 2018 at 07:27, Randal Pinto  wrote:

> I wonder why Microsoft doesn’t even have it in their roadmap.
>
> After having blogged about their journey implementing DMARC it is a bit of
> a let down that they now don’t send reports to help others implement it
> too.
>
>
> On 14 Jul 2018, at 00:36, Brandon Long via dmarc-discuss <
> dmarc-discuss@dmarc.org> wrote:
>
>
>
> On Fri, Jul 13, 2018 at 11:20 AM John Levine via dmarc-discuss <
> dmarc-discuss@dmarc.org> wrote:
>
>> In article > LAMP152.PROD.OUTLOOK.COM> you write:
>> >Guys, I'm looking for the RUA coming from MS mail servers, but I just
>> didn't see any.
>>
>> I have regular reports through October 2017, then four reports this
>> year, the last one in April.
>>
>> I assume this means they've stopped sending reports, not that they've
>> stopped looking at DMARC.
>>
>
> https://blogs.msdn.microsoft.com/tzink/2018/05/21/a-way-to-
> sort-of-approximate-dmarc-aggregate-reports-in-office-365/
>
> O365 doesn't support them, and they've migrated most of
> Hotmail/Outlook/Live to O365, so perhaps that's why they're gone.
>
> Brandon
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
>


-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

-- 


Red Sift  is the power behind OnDMARC 





You can find us at 20 Air Street,  
4th
 
Floor - Wayra, London, W1B 5AN, UK 



Or follow us at @redsift  and @getondmarc 





If you have a couple of minutes spare 
why not... 

- Check us out looking dapper when we were named Innovative 
Product of the Year 2018 



- Read about how we helped ADS beat phishing in the UK Defence Journal 
.


- Or catch up on our latest advice 
 
for boosting email deliverability and beating phishing.




Red Sift is a 
limited company registered in England and Wales. Registered number: 
09240956. Registered office: Kemp House, 152 City Road, London EC1V 2NX 
.

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] MS mail servers (outlook, office365)

[Randal Pinto via dmarc-discuss]

I wonder why Microsoft doesn’t even have it in their roadmap. 

After having blogged about their journey implementing DMARC it is a bit of a 
let down that they now don’t send reports to help others implement it too. 


> On 14 Jul 2018, at 00:36, Brandon Long via dmarc-discuss 
>  wrote:
> 
> 
> 
>> On Fri, Jul 13, 2018 at 11:20 AM John Levine via dmarc-discuss 
>>  wrote:
>> In article 
>> 
>>  you write:
>> >Guys, I'm looking for the RUA coming from MS mail servers, but I just 
>> >didn't see any.
>> 
>> I have regular reports through October 2017, then four reports this
>> year, the last one in April.
>> 
>> I assume this means they've stopped sending reports, not that they've 
>> stopped looking at DMARC.
> 
> https://blogs.msdn.microsoft.com/tzink/2018/05/21/a-way-to-sort-of-approximate-dmarc-aggregate-reports-in-office-365/
> 
> O365 doesn't support them, and they've migrated most of Hotmail/Outlook/Live 
> to O365, so perhaps that's why they're gone.
> 
> Brandon
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)

-- 


Red Sift  is the power behind OnDMARC 





You can find us at 20 Air Street,  
4th
 
Floor - Wayra, London, W1B 5AN, UK 



Or follow us at @redsift  and @getondmarc 





If you have a couple of minutes spare 
why not... 

- Check us out looking dapper when we were named Innovative 
Product of the Year 2018 



- Read about how we helped ADS beat phishing in the UK Defence Journal 
.


- Or catch up on our latest advice 
 
for boosting email deliverability and beating phishing.




Red Sift is a 
limited company registered in England and Wales. Registered number: 
09240956. Registered office: Kemp House, 152 City Road, London EC1V 2NX 
.

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] Incorporation of dmarc in our email system

[Randal Pinto via dmarc-discuss]

Hi Carl,
Do you mean add validation of DMARC to your inbound email systems or to
create a DMARC policy for your domain?


On 26 April 2018 at 14:15, Bongaerts Contract via dmarc-discuss <
dmarc-discuss@dmarc.org> wrote:

> Hello,
>
> Could someone please send us the procedure to incorporate dmarc in our
> email system ?
>
> Thank you.
>
> --
> Carl Bongaerts
> Bongaerts ContractTel: 416-831-7841
>
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>



-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

-- 


Red Sift  is the power behind OnDMARC 



You can find us at 20 Air Street,  
4th
 
Floor - Wayra, London, W1B 5AN, UK 



Or follow us at @redsift  and @getondmarc 



If you have a couple of minutes spare 
why not... 

Read about how we helped ADS beat phishing in the UK Defence 
Journal 
.


Or check out our latest advice 
 
on boosting email deliverability and beating phishing.


Red Sift is a 
limited company registered in England and Wales. Registered number: 
09240956. Registered office: Kemp House, 152 City Road, London EC1V 2NX 
.

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] [EXTERNAL] Re: Mimecast and Office 365

[Randal Pinto via dmarc-discuss]

Hi Terry,

Other Microsoft properties such as LinkedIn and Outlook generate DMARC reports, 
is there a plan to roll this out to Office 365? 

We find that a number of people who embark on implementing DMARC and have stats 
from their gateways expect to see a similar number (or close enough) in their 
DMARC reports and by Microsoft being a common destination it makes a 
significant difference on the numbers. It also means that users don’t benefit 
from forensics, Microsoft being one of a few who support this part of the spec.

Best,
Randal


> On 24 Apr 2018, at 06:53, Terry Zink via dmarc-discuss 
>  wrote:
> 
> Okay, when I say "internal mail" I mean intra-tenant mail. Inter-tenant mail 
> is basically the same as external mail from a customer perspective.
> 
> -Original Message-
> From: Roland Turner  
> Sent: Monday, April 23, 2018 9:58 PM
> To: Terry Zink ; dmarc-discuss@dmarc.org
> Subject: [EXTERNAL] Re: [dmarc-discuss] Mimecast and Office 365
> 
> On 24/04/18 00:51, Terry Zink via dmarc-discuss wrote:
> 
>>> Failure reporting seems odd (because it's always legitimate) until 
>>> you recall that part of the purpose of failure reporting is to 
>>> discover errors by the domain registrant, particularly
>> 
>>> including errors in the DNS zone file, which may or may not
>> 
>>> be under Office 365 control
>> 
>> If Office 365 isn’t doing any DNS checks for SPF, DKIM, and DMARC for 
>> internal email, then how would a DMARC report help with any of that?
>> 
> 
> On this line of reasoning, it would be necessary to perform those checks 
> during message handling.
> 
> (I note that you refer here to "internal mail" and below to "inter-tenant 
> communication". To be clear, I'm referring specifically to DMARC reporting - 
> both failure and aggregate - for inter-tenant email, rather than for 
> intra-tenant email.)
>> 
>>> Aggregate reporting likewise seems like something that would make 
>>> sense for inter-tenant communication
>> 
>> Inter-tenant communication is treated the same (more or less) as an 
>> inbound message that originates from outside the service, so any DMARC 
>> reports that are sent would not different between tenant-to-tenant 
>> mail vs. outside-to-Office365 mail.
>> 
> 
> So long as the checks are being performed, yes, this is what I'm suggesting.
> 
> You might reasonably object that the incremental benefit in performing these 
> tests is too small to warrant performing them of course (presumably there are 
> no large mailing-list operators using Office 365).
> 
>>> Does Office 365 DKIM sign inter-tenant email?
>> 
>> Yes. Inter-tenant mail is treated the same for DKIM purposes as 
>> Tenant-to-external mail. Our customer guidance is here for DKIM:
>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftechn
>> et.microsoft.com%2Fen-us%2Flibrary%2Fmt695945(v%3Dexchg.150).aspx
>> =02%7C01%7Ctzink%40microsoft.com%7Cabbbe14f6bb34e45729108d5a9a007be%7C
>> 72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636601427147563145=q0
>> XGyDUlS9dz9n25T5IrxtsbzyX6FIXTstxD7ZI0Exw%3D=0
>> 
> 
> Great.
> 
> - Roland
> 
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)

-- 


Red Sift  is the power behind OnDMARC 



You can find us at 20 Air Street,  
4th
 
Floor - Wayra, London, W1B 5AN, UK 



Or follow us at @redsift  and @getondmarc 



If you have a couple of minutes spare 
why not... 

Read about how we helped ADS beat phishing in the UK Defence 
Journal 
.


Or check out our latest advice 
 
on boosting email deliverability and beating phishing.


Red Sift is a 
limited company registered in England and Wales. Registered number: 
09240956. Registered office: Kemp House, 152 City Road, London EC1V 2NX 
.


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: 

Re: [dmarc-discuss] DMARC report to external domain

[Randal Pinto via dmarc-discuss]

Yes, you can have as many domains as you want reporting to that domain.

Randal 

> On 22 Feb 2018, at 01:24, <boonhai@infineon.com> 
> <boonhai@infineon.com> wrote:
> 
> Sorry, typo.
>  
> domain1.com._report._dmarc.domain3.com. TXT "v=DMARC1"
> domain2.com._report._dmarc.domain3.com. TXT "v=DMARC1"
>  
>  
> 
>  
> Thanks.
>  
> Regards,
> YEo
>  
> From: Yeo Boon Hai (IFMY IT OS IUC M) 
> Sent: Thursday, 22 February, 2018 9:23 AM
> To: 'Randal Pinto' <ran...@redsift.io>; Vladimir Dubrovin 
> <dubro...@corp.mail.ru>
> Cc: dmarc-discuss@dmarc.org
> Subject: RE: [dmarc-discuss] DMARC report to external domain
>  
> Hi all,
>  
> Thank you for the sample.
> If I have more than 1 domains that need to send to same domain admin so can I 
> have multiple entries like below?
>  
> domain1.com._report._dmarc.domain2.com. TXT "v=DMARC1"
> domain2.com._report._dmarc.domain2.com. TXT "v=DMARC1"
>  
>  
> 
>  
> Thanks.
>  
> Regards,
> Yeo
>  
>  
> From: Randal Pinto [mailto:ran...@redsift.io] 
> Sent: Wednesday, 21 February, 2018 6:40 PM
> To: Vladimir Dubrovin <dubro...@corp.mail.ru>
> Cc: Yeo Boon Hai (IFMY IT OS IUC M) <boonhai@infineon.com>; 
> dmarc-discuss@dmarc.org
> Subject: Re: [dmarc-discuss] DMARC report to external domain
>  
> You are correct Vladimir, I got the numbering incorrectly when trying to 
> craft the example.
>  
> On 21 February 2018 at 10:07, Vladimir Dubrovin <dubro...@corp.mail.ru> wrote:
> 
> It's incorrect. If you want reports for domain1.com are sent to e-mail 
> address in domain2.com, domain2.com must publish a record
> 
> domain1.com._report._dmarc.domain2.com. TXT "v=DMARC1"
> 
> to indicate it's willing to receive the reports for domain1.com
>  
> 
> 
> 21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
> Hello Yeo,
>  
> If you want domain1.com to report to domain2.com you have to add the 
> following DNS entry to domain1.com:
>  
> Name: domain2.com._report._dmarc
> Value: "v=DMARC1;"
>  
> This will authorise domain2.com to receive DMARC reports on behalf of 
> domain1.com
>  
> Best,
> Randal
>  
>  
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss <dmarc-discuss@dmarc.org> 
> wrote:
> Hi all,
>  
> I would like to change the DMARC report to my another domain IT support to 
> check.
> After I changed, I noticed it failed the DMARC external validation. L
>  
> When a report generator has an aggregate report to send to example.com, it 
> will consult example.com‘s DMARC record and extract the address above. Since 
> the domain in that address is not example.com or its organizational domain, 
> it would have to make an authorization check first. It would take that domain 
> the report is for (example.com), and the domain that the rua field references 
> (otherdomain.com), and construct a new name like this:
>  
> “example.com._report._dmarc.otherdomain.com”
>  
> May I know how to create the this DNS record? Any sample?
>  
> Thanks.
>  
> Regards,
> Yeo
>  
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
> 
> 
>  
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto
>  
> Red Sift powers OnDMARC
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>  
> News: OnDMARC wins Cyber Security Start-Up of the Year | OnDMARC joins 
> G-Cloud 9
>  
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>  
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
>  
> 
> -- 
> Vladimir Dubrovin
> @Mail.Ru
> 
> 
>  
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto
>  
> Red Sift powers OnDMARC
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>  
> News: OnDMARC wins Cyber Security Start-Up of the Year | OnDMARC joins 
> G-Cloud 9
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

[Randal Pinto via dmarc-discuss]

You are correct Vladimir, I got the numbering incorrectly when trying to
craft the example.

On 21 February 2018 at 10:07, Vladimir Dubrovin <dubro...@corp.mail.ru>
wrote:

>
> It's incorrect. If you want reports for domain1.com are sent to e-mail
> address in domain2.com, domain2.com must publish a record
>
>
>
> *domain1.com._report._dmarc.domain2.com <http://dmarc.domain2.com>. TXT
> "v=DMARC1" *to indicate it's willing to receive the reports for
> domain1.com
>
>
>
> 21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
>
> Hello Yeo,
>
> If you want *domain1.com <http://domain1.com>* to report to *domain2.com
> <http://domain2.com>* you have to add the following DNS entry to *domain1.com
> <http://domain1.com>*:
>
> Name: *domain2.com._report._dmarc*
> Value: *"v=DMARC1;"*
>
> This will authorise *domain2.com <http://domain2.com>* to receive DMARC
> reports on behalf of *domain1.com <http://domain1.com>*
>
> Best,
> Randal
>
>
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss <
> dmarc-discuss@dmarc.org> wrote:
>
>> Hi all,
>>
>>
>>
>> I would like to change the DMARC report to my another domain IT support
>> to check.
>>
>> After I changed, I noticed it failed the DMARC external validation. L
>>
>>
>>
>> When a report generator has an aggregate report to send to example.com, it 
>> will consult example.com‘s DMARC record and extract the address above. Since 
>> the domain in that address is not example.com or its organizational domain 
>> <https://dmarc.org/wiki/Glossary#Organizational_Domain>, it would have to 
>> make an authorization check first. It would take that domain the report is 
>> for (example.com), and the domain that the rua field references 
>> (otherdomain.com), and construct a new name like this:
>>
>>
>>
>> “example.com._report._dmarc.otherdomain.com”
>>
>>
>>
>> May I know how to create the this DNS record? Any sample?
>>
>>
>>
>> *Thanks.*
>>
>>
>>
>> *Regards,*
>>
>> *Yeo*
>>
>>
>>
>> ___
>> dmarc-discuss mailing list
>> dmarc-discuss@dmarc.org
>> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>>
>> NOTE: Participating in this list means you agree to the DMARC Note Well
>> terms (http://www.dmarc.org/note_well.html)
>>
>
>
>
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto <https://twitter.com/randalpinto>
>
> *Red Sift
> <https://redsift.com/?utm_source=rp_medium=email_signature> powers OnDMARC
> <https://ondmarc.com/?utm_source=rp_medium=email_signature>*
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>
> *News*: OnDMARC wins Cyber Security Start-Up of the Year
> <https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
>  | OnDMARC joins G-Cloud 9
> <https://www.digitalmarketplace.service.gov.uk/g-cloud/services/856003973521292>
>
>
> ___
> dmarc-discuss mailing 
> listdmarc-discuss@dmarc.orghttp://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
>
>
> --
> Vladimir Dubrovin
> @Mail.Ru
>
>


-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto <https://twitter.com/randalpinto>

*Red Sift
<https://redsift.com/?utm_source=rp_medium=email_signature> powers OnDMARC
<https://ondmarc.com/?utm_source=rp_medium=email_signature>*
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

*News*: OnDMARC wins Cyber Security Start-Up of the Year
<https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
 | OnDMARC joins G-Cloud 9
<https://www.digitalmarketplace.service.gov.uk/g-cloud/services/856003973521292>
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

[Randal Pinto via dmarc-discuss]

Hello Yeo,

If you want *domain1.com * to report to *domain2.com
* you have to add the following DNS entry to *domain1.com
*:

Name: *domain2.com._report._dmarc*
Value: *"v=DMARC1;"*

This will authorise *domain2.com * to receive DMARC
reports on behalf of *domain1.com *

Best,
Randal


On 21 February 2018 at 09:29, Yeo via dmarc-discuss  wrote:

> Hi all,
>
>
>
> I would like to change the DMARC report to my another domain IT support to
> check.
>
> After I changed, I noticed it failed the DMARC external validation. L
>
>
>
> When a report generator has an aggregate report to send to example.com, it 
> will consult example.com‘s DMARC record and extract the address above. Since 
> the domain in that address is not example.com or its organizational domain 
> , it would have to 
> make an authorization check first. It would take that domain the report is 
> for (example.com), and the domain that the rua field references 
> (otherdomain.com), and construct a new name like this:
>
>
>
> “example.com._report._dmarc.otherdomain.com”
>
>
>
> May I know how to create the this DNS record? Any sample?
>
>
>
> *Thanks.*
>
>
>
> *Regards,*
>
> *Yeo*
>
>
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>



-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

*Red Sift
 powers OnDMARC
*
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

*News*: OnDMARC wins Cyber Security Start-Up of the Year

 | OnDMARC joins G-Cloud 9

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

[dmarc-discuss] No DMARC from Google again?

[Randal Pinto via dmarc-discuss]

Anyone got DMARC reports from Google? Last one I got was on 13/Aug.
Capacity problems again?

-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

*Red Sift
 powers OnDMARC
*
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

*News*: OnDMARC wins Cyber Security Start-Up of the Year

 | OnDMARC joins G-Cloud 9

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

[dmarc-discuss] Google DMARC reports

[Randal Pinto via dmarc-discuss]

Anyone knows what's happening with DMARC reports from Google? We haven't
received one for 2 days now.

I spoke to the G Suite team but it is managed by another team, I was
promised a best effort by their support engineer to find out what's going
on.

I'll update the list if I hear anything.

-- 
Randal Pinto
Founder & COO
+44 7703 108205 <+447703108205>
@randalpinto 

Redsift Limited
5th Floor, 43 Whitfield Street, London, W1T 4HD
OnDMARC - Actively block phishing attacks. Increase email deliverability.
https://ondmarc.com
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)