Hi,

In the last few weeks, I have started receiving DMARC reports from google.com with DKIM success for an unauthorized sender. Does this mean my signing keys are compromised (or) is there any other explanation in DMARC for this?

The following is the published policy,

  <policy_published>
    <domain>mpipe.net</domain>
    <adkim>s</adkim>
    <aspf>s</aspf>
    <p>reject</p>
    <sp>reject</sp>
    <pct>100</pct>
  </policy_published>


And, the following is one of the records,

  <record>
    <row>
      <source_ip>67.205.101.106</source_ip>
      <count>4</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>mpipe.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>mpipe.net</domain>
        <result>pass</result>
      </dkim>
      <spf>
        <domain>mpipe.net</domain>
        <result>fail</result>
      </spf>
    </auth_results>
  </record>

Regards,
-Ashok.
_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to