I'm requesting insights on an oddity in impacting the Source IP
appearing in received RUA reports.
A university receiving my organization's emails is sending RUAs that
identify the university's own mailhosts as the Source IP for the
messages. The DKIM domain reflects my organization's named domains.
Their explanation is that the mail is being forwarded internally from an
external facing AWS-hosted mailhost to a gmail service that handles
their end user mailboxes.
The resulting records in the RUA reports look rather hinky to me. I have
an opportunity to discuss the matter with the university's software
engineer responsible for this. So insights on whether RUAs with other
than the true original Source IP is commonplace would be helpful.
Edward
--
_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
