You can request Forensic Reports for exactly this reason using "ruf=" tag. This function is intended to essentially return a single-email-specific report for every single email that fails DMARC, but many (maybe even most) ISPs don't return Forensic Reports in the interest of the privacy of their users.
My best, Zack Aab [image: small_IP_updated copy 2- 85.png] <http://www.inboxpros.com> Zack Aab *|* Senior Deliverability Strategist M: 706.870.1061 *Inbox Pros | *678.214.3739 1995 North Park Place I Suite 300 | Atlanta, GA 30339 On Thu, Jul 19, 2018 at 4:04 PM, Jerry Warner via dmarc-discuss < dmarc-discuss@dmarc.org> wrote: > > Is there a way to get additional details about a rejected email? I set > my SPF record to quarantine after running in test mode for a while and > having no problems. I've continued to watch the reports and all the valid > emails were getting through, while the others were not. Perfect. And > then today, I see a record that failed, but it WAS from my server's IP so I > assume it was a valid email. > > Is there some way to get more details about the message so I can take a > look to see why it's failed? I don't see anything in the reports that > helps me identify who, when, or what email it was. > > > _______________________________________________ > dmarc-discuss mailing list > dmarc-discuss@dmarc.org > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) >
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
