Re: [dmarc-discuss] DMARC report to external domain

2018-03-05 Thread Vladimir Dubrovin via dmarc-discuss 

You do not need to create additional DMARC records for subdomains for
either DMARC policy or DMARC reporting, unless you want this subdomain
to have different policy. Unlike SPF, DMARC acts for subdomains by default.


05.03.2018 10:37, boonhai@infineon.com пишет:
>
> Hi Randal,
>
>  
>
> If we have more 50 sub domains meaning we need to create 50 TXT
> records? Anyway we can combine?
>
>  
>
> *Thanks.*
>
> * *
>
> *Regards,*
>
> *Yeo*
>
>  
>
> *From:*Yeo Boon Hai (IFMY IT OS IUC M)
> *Sent:* Thursday, 22 February, 2018 9:25 AM
> *To:* 'Randal Pinto' <ran...@redsift.io>; 'Vladimir Dubrovin'
> <dubro...@corp.mail.ru>
> *Cc:* 'dmarc-discuss@dmarc.org' <dmarc-discuss@dmarc.org>
> *Subject:* RE: [dmarc-discuss] DMARC report to external domain
>
>  
>
> Sorry, typo.
>
>  
>
> *domain1.com._report._dmarc.domain3.com <http://dmarc.domain2.com>.
> TXT "v=DMARC1"*
>
> *domain2.com._report._dmarc.domain3.com <http://dmarc.domain2.com>.
> TXT "v=DMARC1"*
>
>  
>
>  
>
>  
>
> *Thanks.*
>
> * *
>
> *Regards,*
>
> *YEo*
>
>  
>
> *From:*Yeo Boon Hai (IFMY IT OS IUC M)
> *Sent:* Thursday, 22 February, 2018 9:23 AM
> *To:* 'Randal Pinto' <ran...@redsift.io <mailto:ran...@redsift.io>>;
> Vladimir Dubrovin <dubro...@corp.mail.ru <mailto:dubro...@corp.mail.ru>>
> *Cc:* dmarc-discuss@dmarc.org <mailto:dmarc-discuss@dmarc.org>
> *Subject:* RE: [dmarc-discuss] DMARC report to external domain
>
>  
>
> Hi all,
>
>  
>
> Thank you for the sample.
>
> If I have more than 1 domains that need to send to same domain admin
> so can I have multiple entries like below?
>
>  
>
> *domain1.com._report._dmarc.domain2.com <http://dmarc.domain2.com>.
> TXT "v=DMARC1"*
>
> *domain2.com._report._dmarc.domain2.com <http://dmarc.domain2.com>.
> TXT "v=DMARC1"*
>
>  
>
>  
>
>  
>
> *Thanks.*
>
> * *
>
> *Regards,*
>
> *Yeo*
>
>  
>
>  
>
> *From:*Randal Pinto [mailto:ran...@redsift.io]
> *Sent:* Wednesday, 21 February, 2018 6:40 PM
> *To:* Vladimir Dubrovin <dubro...@corp.mail.ru
> <mailto:dubro...@corp.mail.ru>>
> *Cc:* Yeo Boon Hai (IFMY IT OS IUC M) <boonhai@infineon.com
> <mailto:boonhai@infineon.com>>; dmarc-discuss@dmarc.org
> <mailto:dmarc-discuss@dmarc.org>
> *Subject:* Re: [dmarc-discuss] DMARC report to external domain
>
>  
>
> You are correct Vladimir, I got the numbering incorrectly when trying
> to craft the example.
>
>  
>
> On 21 February 2018 at 10:07, Vladimir Dubrovin <dubro...@corp.mail.ru
> <mailto:dubro...@corp.mail.ru>> wrote:
>
>
> It's incorrect. If you want reports for domain1.com
> <http://domain1.com> are sent to e-mail address in domain2.com
> <http://domain2.com>, domain2.com <http://domain2.com> must
> publish a record
>
> *domain1.com._report._dmarc.domain2.com
> <http://dmarc.domain2.com>. TXT "v=DMARC1"
>
> *to indicate it's willing to receive the reports for domain1.com
> <http://domain1.com>
>
>  
>
>
>
> 21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
>
> Hello Yeo,
>
>  
>
> If you want *domain1.com <http://domain1.com>* to report to
> *domain2.com <http://domain2.com>* you have to add the
> following DNS entry to *domain1.com <http://domain1.com>*:
>
>  
>
> Name: *domain2.com._report._dmarc*
>
> Value: *"v=DMARC1;"*
>
>  
>
> This will authorise *domain2.com <http://domain2.com>* to
> receive DMARC reports on behalf of *domain1.com
> <http://domain1.com>*
>
>  
>
> Best,
>
> Randal
>
>  
>
>  
>
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss
> <dmarc-discuss@dmarc.org <mailto:dmarc-discuss@dmarc.org>> wrote:
>
> Hi all,
>
>  
>
> I would like to change the DMARC report to my another
> domain IT support to check.
>
> After I changed, I noticed it failed the DMARC external
> validation. L
>
>  
>
> When a report generator has an aggregate report to send to
> example.com <http://example.com>, it will consult
> example.com <http://example.

Re: [dmarc-discuss] DMARC report to external domain

2018-03-04 Thread Yeo via dmarc-discuss 
Hi Randal,

If we have more 50 sub domains meaning we need to create 50 TXT records? Anyway 
we can combine?

Thanks.

Regards,
Yeo

From: Yeo Boon Hai (IFMY IT OS IUC M)
Sent: Thursday, 22 February, 2018 9:25 AM
To: 'Randal Pinto' <ran...@redsift.io>; 'Vladimir Dubrovin' 
<dubro...@corp.mail.ru>
Cc: 'dmarc-discuss@dmarc.org' <dmarc-discuss@dmarc.org>
Subject: RE: [dmarc-discuss] DMARC report to external domain

Sorry, typo.

domain1.com._report._dmarc.domain3.com<http://dmarc.domain2.com>. TXT "v=DMARC1"
domain2.com._report._dmarc.domain3.com<http://dmarc.domain2.com>. TXT "v=DMARC1"


[cid:image001.jpg@01D3B497.CF52FC60]

Thanks.

Regards,
YEo

From: Yeo Boon Hai (IFMY IT OS IUC M)
Sent: Thursday, 22 February, 2018 9:23 AM
To: 'Randal Pinto' <ran...@redsift.io<mailto:ran...@redsift.io>>; Vladimir 
Dubrovin <dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>>
Cc: dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
Subject: RE: [dmarc-discuss] DMARC report to external domain

Hi all,

Thank you for the sample.
If I have more than 1 domains that need to send to same domain admin so can I 
have multiple entries like below?

domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"
domain2.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"


[cid:image002.jpg@01D3B497.CF52FC60]

Thanks.

Regards,
Yeo


From: Randal Pinto [mailto:ran...@redsift.io]
Sent: Wednesday, 21 February, 2018 6:40 PM
To: Vladimir Dubrovin <dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>>
Cc: Yeo Boon Hai (IFMY IT OS IUC M) 
<boonhai....@infineon.com<mailto:boonhai....@infineon.com>>; 
dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
Subject: Re: [dmarc-discuss] DMARC report to external domain

You are correct Vladimir, I got the numbering incorrectly when trying to craft 
the example.

On 21 February 2018 at 10:07, Vladimir Dubrovin 
<dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>> wrote:

It's incorrect. If you want reports for domain1.com<http://domain1.com> are 
sent to e-mail address in domain2.com<http://domain2.com>, 
domain2.com<http://domain2.com> must publish a record
domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"

to indicate it's willing to receive the reports for 
domain1.com<http://domain1.com>



21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
Hello Yeo,

If you want domain1.com<http://domain1.com> to report to 
domain2.com<http://domain2.com> you have to add the following DNS entry to 
domain1.com<http://domain1.com>:

Name: domain2.com._report._dmarc
Value: "v=DMARC1;"

This will authorise domain2.com<http://domain2.com> to receive DMARC reports on 
behalf of domain1.com<http://domain1.com>

Best,
Randal


On 21 February 2018 at 09:29, Yeo via dmarc-discuss 
<dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>> wrote:
Hi all,

I would like to change the DMARC report to my another domain IT support to 
check.
After I changed, I noticed it failed the DMARC external validation. ☹


When a report generator has an aggregate report to send to 
example.com<http://example.com>, it will consult 
example.com<http://example.com>‘s DMARC record and extract the address above. 
Since the domain in that address is not example.com<http://example.com> or its 
organizational domain<https://dmarc.org/wiki/Glossary#Organizational_Domain>, 
it would have to make an authorization check first. It would take that domain 
the report is for (example.com<http://example.com>), and the domain that the 
rua field references (otherdomain.com<http://otherdomain.com>), and construct a 
new name like this:



“example.com._report._dmarc.otherdomain.com<http://dmarc.otherdomain.com>”



May I know how to create the this DNS record? Any sample?

Thanks.

Regards,
Yeo


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)



--
Randal Pinto
Founder & COO
+447703108205<tel:+447703108205>
@randalpinto<https://twitter.com/randalpinto>

Red Sift<https://redsift.com/?utm_source=rp_medium=email_signature> powers 
OnDMARC<https://ondmarc.com/?utm_source=rp_medium=email_signature>
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

News: OnDMARC wins Cyber Security Start-Up of the 
Year<https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
 | OnDMARC joins G-Cloud 
9<https://www.digitalmarketplace.service.gov.uk/g-cloud/s

Re: [dmarc-discuss] DMARC report to external domain

2018-02-22 Thread Randal Pinto via dmarc-discuss 
Yes, you can have as many domains as you want reporting to that domain.

Randal 

> On 22 Feb 2018, at 01:24, <boonhai@infineon.com> 
> <boonhai@infineon.com> wrote:
> 
> Sorry, typo.
>  
> domain1.com._report._dmarc.domain3.com. TXT "v=DMARC1"
> domain2.com._report._dmarc.domain3.com. TXT "v=DMARC1"
>  
>  
> 
>  
> Thanks.
>  
> Regards,
> YEo
>  
> From: Yeo Boon Hai (IFMY IT OS IUC M) 
> Sent: Thursday, 22 February, 2018 9:23 AM
> To: 'Randal Pinto' <ran...@redsift.io>; Vladimir Dubrovin 
> <dubro...@corp.mail.ru>
> Cc: dmarc-discuss@dmarc.org
> Subject: RE: [dmarc-discuss] DMARC report to external domain
>  
> Hi all,
>  
> Thank you for the sample.
> If I have more than 1 domains that need to send to same domain admin so can I 
> have multiple entries like below?
>  
> domain1.com._report._dmarc.domain2.com. TXT "v=DMARC1"
> domain2.com._report._dmarc.domain2.com. TXT "v=DMARC1"
>  
>  
> 
>  
> Thanks.
>  
> Regards,
> Yeo
>  
>  
> From: Randal Pinto [mailto:ran...@redsift.io] 
> Sent: Wednesday, 21 February, 2018 6:40 PM
> To: Vladimir Dubrovin <dubro...@corp.mail.ru>
> Cc: Yeo Boon Hai (IFMY IT OS IUC M) <boonhai@infineon.com>; 
> dmarc-discuss@dmarc.org
> Subject: Re: [dmarc-discuss] DMARC report to external domain
>  
> You are correct Vladimir, I got the numbering incorrectly when trying to 
> craft the example.
>  
> On 21 February 2018 at 10:07, Vladimir Dubrovin <dubro...@corp.mail.ru> wrote:
> 
> It's incorrect. If you want reports for domain1.com are sent to e-mail 
> address in domain2.com, domain2.com must publish a record
> 
> domain1.com._report._dmarc.domain2.com. TXT "v=DMARC1"
> 
> to indicate it's willing to receive the reports for domain1.com
>  
> 
> 
> 21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
> Hello Yeo,
>  
> If you want domain1.com to report to domain2.com you have to add the 
> following DNS entry to domain1.com:
>  
> Name: domain2.com._report._dmarc
> Value: "v=DMARC1;"
>  
> This will authorise domain2.com to receive DMARC reports on behalf of 
> domain1.com
>  
> Best,
> Randal
>  
>  
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss <dmarc-discuss@dmarc.org> 
> wrote:
> Hi all,
>  
> I would like to change the DMARC report to my another domain IT support to 
> check.
> After I changed, I noticed it failed the DMARC external validation. L
>  
> When a report generator has an aggregate report to send to example.com, it 
> will consult example.com‘s DMARC record and extract the address above. Since 
> the domain in that address is not example.com or its organizational domain, 
> it would have to make an authorization check first. It would take that domain 
> the report is for (example.com), and the domain that the rua field references 
> (otherdomain.com), and construct a new name like this:
>  
> “example.com._report._dmarc.otherdomain.com”
>  
> May I know how to create the this DNS record? Any sample?
>  
> Thanks.
>  
> Regards,
> Yeo
>  
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
> 
> 
>  
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto
>  
> Red Sift powers OnDMARC
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>  
> News: OnDMARC wins Cyber Security Start-Up of the Year | OnDMARC joins 
> G-Cloud 9
>  
> 
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>  
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
>  
> 
> -- 
> Vladimir Dubrovin
> @Mail.Ru
> 
> 
>  
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto
>  
> Red Sift powers OnDMARC
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>  
> News: OnDMARC wins Cyber Security Start-Up of the Year | OnDMARC joins 
> G-Cloud 9
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread Yeo via dmarc-discuss 
Sorry, typo.

domain1.com._report._dmarc.domain3.com<http://dmarc.domain2.com>. TXT "v=DMARC1"
domain2.com._report._dmarc.domain3.com<http://dmarc.domain2.com>. TXT "v=DMARC1"


[cid:image002.jpg@01D3ABBF.003BF930]

Thanks.

Regards,
YEo

From: Yeo Boon Hai (IFMY IT OS IUC M)
Sent: Thursday, 22 February, 2018 9:23 AM
To: 'Randal Pinto' <ran...@redsift.io>; Vladimir Dubrovin 
<dubro...@corp.mail.ru>
Cc: dmarc-discuss@dmarc.org
Subject: RE: [dmarc-discuss] DMARC report to external domain

Hi all,

Thank you for the sample.
If I have more than 1 domains that need to send to same domain admin so can I 
have multiple entries like below?

domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"
domain2.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"


[cid:image003.jpg@01D3ABBF.003BF930]

Thanks.

Regards,
Yeo


From: Randal Pinto [mailto:ran...@redsift.io]
Sent: Wednesday, 21 February, 2018 6:40 PM
To: Vladimir Dubrovin <dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>>
Cc: Yeo Boon Hai (IFMY IT OS IUC M) 
<boonhai@infineon.com<mailto:boonhai....@infineon.com>>; 
dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
Subject: Re: [dmarc-discuss] DMARC report to external domain

You are correct Vladimir, I got the numbering incorrectly when trying to craft 
the example.

On 21 February 2018 at 10:07, Vladimir Dubrovin 
<dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>> wrote:

It's incorrect. If you want reports for domain1.com<http://domain1.com> are 
sent to e-mail address in domain2.com<http://domain2.com>, 
domain2.com<http://domain2.com> must publish a record
domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"

to indicate it's willing to receive the reports for 
domain1.com<http://domain1.com>



21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
Hello Yeo,

If you want domain1.com<http://domain1.com> to report to 
domain2.com<http://domain2.com> you have to add the following DNS entry to 
domain1.com<http://domain1.com>:

Name: domain2.com._report._dmarc
Value: "v=DMARC1;"

This will authorise domain2.com<http://domain2.com> to receive DMARC reports on 
behalf of domain1.com<http://domain1.com>

Best,
Randal


On 21 February 2018 at 09:29, Yeo via dmarc-discuss 
<dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>> wrote:
Hi all,

I would like to change the DMARC report to my another domain IT support to 
check.
After I changed, I noticed it failed the DMARC external validation. ☹


When a report generator has an aggregate report to send to 
example.com<http://example.com>, it will consult 
example.com<http://example.com>‘s DMARC record and extract the address above. 
Since the domain in that address is not example.com<http://example.com> or its 
organizational domain<https://dmarc.org/wiki/Glossary#Organizational_Domain>, 
it would have to make an authorization check first. It would take that domain 
the report is for (example.com<http://example.com>), and the domain that the 
rua field references (otherdomain.com<http://otherdomain.com>), and construct a 
new name like this:



“example.com._report._dmarc.otherdomain.com<http://dmarc.otherdomain.com>”



May I know how to create the this DNS record? Any sample?

Thanks.

Regards,
Yeo


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)



--
Randal Pinto
Founder & COO
+447703108205<tel:+447703108205>
@randalpinto<https://twitter.com/randalpinto>

Red Sift<https://redsift.com/?utm_source=rp_medium=email_signature> powers 
OnDMARC<https://ondmarc.com/?utm_source=rp_medium=email_signature>
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

News: OnDMARC wins Cyber Security Start-Up of the 
Year<https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
 | OnDMARC joins G-Cloud 
9<https://www.digitalmarketplace.service.gov.uk/g-cloud/services/856003973521292>


___

dmarc-discuss mailing list

dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>

http://www.dmarc.org/mailman/listinfo/dmarc-discuss



NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)



--

Vladimir Dubrovin

@Mail.Ru



--
Randal Pinto
Founder & COO
+447703108205<tel:+447703108205>
@randalpinto<https://twitter.com/randalpinto>

Red Sift<https://redsift.com/?utm_source=r

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread Yeo via dmarc-discuss 
Hi all,

Thank you for the sample.
If I have more than 1 domains that need to send to same domain admin so can I 
have multiple entries like below?

domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"
domain2.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"


[cid:image001.jpg@01D3ABBE.B8B9DA00]

Thanks.

Regards,
Yeo


From: Randal Pinto [mailto:ran...@redsift.io]
Sent: Wednesday, 21 February, 2018 6:40 PM
To: Vladimir Dubrovin <dubro...@corp.mail.ru>
Cc: Yeo Boon Hai (IFMY IT OS IUC M) <boonhai@infineon.com>; 
dmarc-discuss@dmarc.org
Subject: Re: [dmarc-discuss] DMARC report to external domain

You are correct Vladimir, I got the numbering incorrectly when trying to craft 
the example.

On 21 February 2018 at 10:07, Vladimir Dubrovin 
<dubro...@corp.mail.ru<mailto:dubro...@corp.mail.ru>> wrote:

It's incorrect. If you want reports for domain1.com<http://domain1.com> are 
sent to e-mail address in domain2.com<http://domain2.com>, 
domain2.com<http://domain2.com> must publish a record
domain1.com._report._dmarc.domain2.com<http://dmarc.domain2.com>. TXT "v=DMARC1"

to indicate it's willing to receive the reports for 
domain1.com<http://domain1.com>



21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
Hello Yeo,

If you want domain1.com<http://domain1.com> to report to 
domain2.com<http://domain2.com> you have to add the following DNS entry to 
domain1.com<http://domain1.com>:

Name: domain2.com._report._dmarc
Value: "v=DMARC1;"

This will authorise domain2.com<http://domain2.com> to receive DMARC reports on 
behalf of domain1.com<http://domain1.com>

Best,
Randal


On 21 February 2018 at 09:29, Yeo via dmarc-discuss 
<dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>> wrote:
Hi all,

I would like to change the DMARC report to my another domain IT support to 
check.
After I changed, I noticed it failed the DMARC external validation. ☹


When a report generator has an aggregate report to send to 
example.com<http://example.com>, it will consult 
example.com<http://example.com>‘s DMARC record and extract the address above. 
Since the domain in that address is not example.com<http://example.com> or its 
organizational domain<https://dmarc.org/wiki/Glossary#Organizational_Domain>, 
it would have to make an authorization check first. It would take that domain 
the report is for (example.com<http://example.com>), and the domain that the 
rua field references (otherdomain.com<http://otherdomain.com>), and construct a 
new name like this:



“example.com._report._dmarc.otherdomain.com<http://dmarc.otherdomain.com>”



May I know how to create the this DNS record? Any sample?

Thanks.

Regards,
Yeo


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)



--
Randal Pinto
Founder & COO
+447703108205<tel:+447703108205>
@randalpinto<https://twitter.com/randalpinto>

Red Sift<https://redsift.com/?utm_source=rp_medium=email_signature> powers 
OnDMARC<https://ondmarc.com/?utm_source=rp_medium=email_signature>
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

News: OnDMARC wins Cyber Security Start-Up of the 
Year<https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
 | OnDMARC joins G-Cloud 
9<https://www.digitalmarketplace.service.gov.uk/g-cloud/services/856003973521292>


___

dmarc-discuss mailing list

dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org>

http://www.dmarc.org/mailman/listinfo/dmarc-discuss



NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)



--

Vladimir Dubrovin

@Mail.Ru



--
Randal Pinto
Founder & COO
+447703108205<tel:+447703108205>
@randalpinto<https://twitter.com/randalpinto>

Red Sift<https://redsift.com/?utm_source=rp_medium=email_signature> powers 
OnDMARC<https://ondmarc.com/?utm_source=rp_medium=email_signature>
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

News: OnDMARC wins Cyber Security Start-Up of the 
Year<https://medium.com/postmasters/ondmarc-makes-its-mark-in-the-cyber-security-awards-2017-c512c1860f6d>
 | OnDMARC joins G-Cloud 
9<https://www.digitalmarketplace.service.gov.uk/g-cloud/services/856003973521292>
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread John Levine via dmarc-discuss 
In article <00c026d7356944adb32b5f654ab07...@infineon.com> you write:
>May I know how to create the this DNS record? Any sample?

Try looking up the TXT record for ._report._dmarc.abuse.net

$ dig example.com._report._dmarc.abuse.net txt

;; QUESTION SECTION:
;example.com._report._dmarc.abuse.net. IN TXT

;; ANSWER SECTION:
example.com._report._dmarc.abuse.net. 3600 IN TXT "v=DMARC1\; p=none\; 
spam=plenty\;"

(The spam=plenty is a joke, but it doesn't hurt anything)

R's,
John
-- 
Regards,
John Levine, jo...@iecc.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. https://jl.ly
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread Randal Pinto via dmarc-discuss 
You are correct Vladimir, I got the numbering incorrectly when trying to
craft the example.

On 21 February 2018 at 10:07, Vladimir Dubrovin 
wrote:

>
> It's incorrect. If you want reports for domain1.com are sent to e-mail
> address in domain2.com, domain2.com must publish a record
>
>
>
> *domain1.com._report._dmarc.domain2.com . TXT
> "v=DMARC1" *to indicate it's willing to receive the reports for
> domain1.com
>
>
>
> 21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
>
> Hello Yeo,
>
> If you want *domain1.com * to report to *domain2.com
> * you have to add the following DNS entry to *domain1.com
> *:
>
> Name: *domain2.com._report._dmarc*
> Value: *"v=DMARC1;"*
>
> This will authorise *domain2.com * to receive DMARC
> reports on behalf of *domain1.com *
>
> Best,
> Randal
>
>
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss <
> dmarc-discuss@dmarc.org> wrote:
>
>> Hi all,
>>
>>
>>
>> I would like to change the DMARC report to my another domain IT support
>> to check.
>>
>> After I changed, I noticed it failed the DMARC external validation. L
>>
>>
>>
>> When a report generator has an aggregate report to send to example.com, it 
>> will consult example.com‘s DMARC record and extract the address above. Since 
>> the domain in that address is not example.com or its organizational domain 
>> , it would have to 
>> make an authorization check first. It would take that domain the report is 
>> for (example.com), and the domain that the rua field references 
>> (otherdomain.com), and construct a new name like this:
>>
>>
>>
>> “example.com._report._dmarc.otherdomain.com”
>>
>>
>>
>> May I know how to create the this DNS record? Any sample?
>>
>>
>>
>> *Thanks.*
>>
>>
>>
>> *Regards,*
>>
>> *Yeo*
>>
>>
>>
>> ___
>> dmarc-discuss mailing list
>> dmarc-discuss@dmarc.org
>> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>>
>> NOTE: Participating in this list means you agree to the DMARC Note Well
>> terms (http://www.dmarc.org/note_well.html)
>>
>
>
>
> --
> Randal Pinto
> Founder & COO
> +447703108205
> @randalpinto 
>
> *Red Sift
>  powers OnDMARC
> *
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>
> *News*: OnDMARC wins Cyber Security Start-Up of the Year
> 
>  | OnDMARC joins G-Cloud 9
> 
>
>
> ___
> dmarc-discuss mailing 
> listdmarc-discuss@dmarc.orghttp://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
>
>
> --
> Vladimir Dubrovin
> @Mail.Ru
>
>


-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

*Red Sift
 powers OnDMARC
*
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

*News*: OnDMARC wins Cyber Security Start-Up of the Year

 | OnDMARC joins G-Cloud 9

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread Vladimir Dubrovin via dmarc-discuss 

It's incorrect. If you want reports for domain1.com are sent to e-mail
address in domain2.com, domain2.com must publish a record

*domain1.com._report._dmarc.domain2.com. TXT "v=DMARC1"

*to indicate it's willing to receive the reports for domain1.com*
*



21.02.2018 12:51, Randal Pinto via dmarc-discuss пишет:
> Hello Yeo,
>
> If you want *domain1.com * to report to
> *domain2.com * you have to add the following DNS
> entry to *domain1.com *:
>
> Name: *domain2.com._report._dmarc*
> Value: *"v=DMARC1;"*
>
> This will authorise *domain2.com * to receive
> DMARC reports on behalf of *domain1.com *
>
> Best,
> Randal
>
>
> On 21 February 2018 at 09:29, Yeo via dmarc-discuss
> > wrote:
>
> Hi all,
>
>  
>
> I would like to change the DMARC report to my another domain IT
> support to check.
>
> After I changed, I noticed it failed the DMARC external validation. L
>
>  
>
> When a report generator has an aggregate report to send to
> example.com , it will consult example.com
> ‘s DMARC record and extract the address above.
> Since the domain in that address is not example.com
>  or its organizational domain
> , it would
> have to make an authorization check first. It would take that
> domain the report is for (example.com ), and
> the domain that the rua field references (otherdomain.com
> ), and construct a new name like this:
>
>  
>
> “example.com._report._dmarc.otherdomain.com
> ”
>
>  
>
> May I know how to create the this DNS record? Any sample?
>
>  
>
> *Thanks.*
>
> * *
>
> *Regards,*
>
> *Yeo*
>
>  
>
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org 
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
>
> NOTE: Participating in this list means you agree to the DMARC Note
> Well terms (http://www.dmarc.org/note_well.html
> )
>
>
>
>
> -- 
> Randal Pinto
> Founder & COO
> +447703108205 
> @randalpinto 
>
> *Red Sift
>  powers OnDMARC
> *
> 5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.
>
> *News*: OnDMARC wins Cyber Security Start-Up of the Year
> 
>  | OnDMARC
> joins G-Cloud 9
> 
>
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)


-- 
Vladimir Dubrovin
@Mail.Ru

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Re: [dmarc-discuss] DMARC report to external domain

2018-02-21 Thread Randal Pinto via dmarc-discuss 
Hello Yeo,

If you want *domain1.com * to report to *domain2.com
* you have to add the following DNS entry to *domain1.com
*:

Name: *domain2.com._report._dmarc*
Value: *"v=DMARC1;"*

This will authorise *domain2.com * to receive DMARC
reports on behalf of *domain1.com *

Best,
Randal


On 21 February 2018 at 09:29, Yeo via dmarc-discuss  wrote:

> Hi all,
>
>
>
> I would like to change the DMARC report to my another domain IT support to
> check.
>
> After I changed, I noticed it failed the DMARC external validation. L
>
>
>
> When a report generator has an aggregate report to send to example.com, it 
> will consult example.com‘s DMARC record and extract the address above. Since 
> the domain in that address is not example.com or its organizational domain 
> , it would have to 
> make an authorization check first. It would take that domain the report is 
> for (example.com), and the domain that the rua field references 
> (otherdomain.com), and construct a new name like this:
>
>
>
> “example.com._report._dmarc.otherdomain.com”
>
>
>
> May I know how to create the this DNS record? Any sample?
>
>
>
> *Thanks.*
>
>
>
> *Regards,*
>
> *Yeo*
>
>
>
> ___
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>



-- 
Randal Pinto
Founder & COO
+447703108205
@randalpinto 

*Red Sift
 powers OnDMARC
*
5th Floor, 43 Whitfield Street, W1T 4HD, London, UK.

*News*: OnDMARC wins Cyber Security Start-Up of the Year

 | OnDMARC joins G-Cloud 9

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)