> Using DMARC p=reject without DKIM is broken anyway. You cannot control > how or where your recipients forward their email (and I promise you > many of them forward it to Gmail from IP addresses that are not in > your SPF record).
Yes this is why SRS is being used to re-write the envelope sender... ...which in turn probably breaks DMARC domain alignment I guess. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop