On Fri, Nov 21, 2025 at 12:26 PM Alex Shakhov | SH Consulting <[email protected]> wrote:
> Thanks Todd and Catalin, > > Based on what I’m seeing, this does not appear to be a DNS propagation > issue. We’ve implemented several other DNS records since then, and those > changes have propagated normally. External resolvers can also see the CNAME > record we added with the correct target value so the record itself is in > place and resolving. > > However, for some reason the underlying TXT record behind CNAME is not > being evaluated. > > I may need to try publishing a direct DMARC TXT record instead. That > wasn’t the original plan since we don’t have direct DNS access, but it > might be the only reliable way to ensure proper DMARC evaluation. > > Domain name: elevatere.agency > >> >> I'm seeing a DMARC record at present for that domain, but I assume you went ahead and published the TXT record: $ dig +trace _dmarc.elevatere.agency txt ; <<>> DiG 9.10.6 <<>> +trace _dmarc.elevatere.agency txt ;; global options: +cmd . 510952 IN NS a.root-servers.net. . 510952 IN NS b.root-servers.net. . 510952 IN NS c.root-servers.net. . 510952 IN NS d.root-servers.net. . 510952 IN NS e.root-servers.net. . 510952 IN NS f.root-servers.net. . 510952 IN NS g.root-servers.net. . 510952 IN NS h.root-servers.net. . 510952 IN NS i.root-servers.net. . 510952 IN NS j.root-servers.net. . 510952 IN NS k.root-servers.net. . 510952 IN NS l.root-servers.net. . 510952 IN NS m.root-servers.net. . 510952 IN RRSIG NS 8 0 518400 20251204050000 20251121040000 61809 . w2KE5OdO/S1//ZQQ0FHyvnLs+fr5ljUXTI/7u7JCbXvuM2SKAJZXX+QZ 2eWd6fhAoee+7K31WBCkIj9xjNM1dRTfffJ86OQvUWNleq7UywlB5YvI AcgPBlBelcPleJRXPkLOxs5H7b7DrhutNMVpQzdBCuDyF2ftVwnxW4h2 e+rTQtc40mxyNJqM1D5GjDzxfiY4NMc1LAq5YGJzgjLXCaovpp6mLa9J LgOpTe6uZPbanB8oujPUmjJVIBBDeJOHAE3nXDEcCygBZo0JuuilUxT1 5qb4w6HmR0CmXvfDRMVWr/1M4cTMtAMYKB/jo0HqIEHYI109rLQHNZ+6 r1bLpg== ;; Received 525 bytes from 1.1.1.1#53(1.1.1.1) in 36 ms agency. 172800 IN NS v0n0.nic.agency. agency. 172800 IN NS v0n1.nic.agency. agency. 172800 IN NS v0n2.nic.agency. agency. 172800 IN NS v0n3.nic.agency. agency. 172800 IN NS v2n0.nic.agency. agency. 172800 IN NS v2n1.nic.agency. agency. 86400 IN DS 3424 8 2 1ADD3AB87E1ADCF93DD66FDD6E4359737E7EF52C5B359B8B898EE928 850BE071 agency. 86400 IN RRSIG DS 8 1 86400 20251204050000 20251121040000 61809 . kgcVOok6eJcqK2TRYi8YZ2YQBvHGVwqQx34uSbj1uCdZLHDpNJ3kPdIZ WkAA/6w+jSVElj+H1NJfEjd60Pm1SKeHB8kt7XdOTluGh0zdYAnHJJ1V QrGlCRfM63SfDG3zLZ6f+IHx2lCZgX1LZjYMRPSI3HymAD/OZ8HpLyyv V7uq0oRKn6LR2+yxDbIlYHzvrCIw/YDYbqjxusOer6b02A62RWz0FvDn hVjmEOP8JqfAsx9EbDAMkax3ewc6jJDe5Cmyjs2ZnRSRjc60HCoClu6K b315v5LtWJs8XB8KCcGeTD/GRGAPz59ocTg1gR3wvazCd3d8BQH/hIjq xtulLQ== ;; Received 769 bytes from 170.247.170.2#53(b.root-servers.net) in 36 ms elevatere.agency. 3600 IN NS jose.ns.cloudflare.com. elevatere.agency. 3600 IN NS raphaela.ns.cloudflare.com. 2bn4llmnn4clkg1pbe1no58v3lr5s170.agency. 3600 IN NSEC3 1 1 0 73 2BPU7ERE00D27M4M7OA20PFC31PFUCRQ NS SOA RRSIG DNSKEY NSEC3PARAM 2bn4llmnn4clkg1pbe1no58v3lr5s170.agency. 3600 IN RRSIG NSEC3 8 2 3600 20251212174338 20251121164338 51753 agency. narcpJ9B3kgEyHThj/G/89iSRb3/e3TRR9xLukVTKsPLy4gbQuPi2EH6 iKVqcaY4WJiXmXoa2grDQUm7SZAxpNGaGiA012gvXXEFH0QrbwGvyy+3 PN04H0fEa+3bJEuohCAfZ3u8hN8MZrKfWF9A4MA30h8ZUI4YK4/AsUsy e4g= k73900ull37dc11tdh46ark329khockc.agency. 3600 IN NSEC3 1 1 0 73 K77UP8L5G0UHDN8F0MMOP9D1G6BFQMIJ NS DS RRSIG k73900ull37dc11tdh46ark329khockc.agency. 3600 IN RRSIG NSEC3 8 2 3600 20251208152047 20251117142047 51753 agency. VEsJMgpRWi/VaXxey6lFfuEXFNl1srRKx3BydpgUFh0o5qY3p3TMUqOs KiBsGbPygN3NZt+wIMVGGfik4HhCDMCd5xlZMZlHe6Zaz9PDhERrGBIa 1ATDIDpe92+qgFG9uAWEvsYguC3p5iuMUir073zGeGdGiXg4DQ/yaAuS Sx4= ;; Received 604 bytes from 161.232.12.2#53(v0n3.nic.agency) in 108 ms _dmarc.elevatere.agency. 300 IN TXT "v=DMARC1; p=none; rua=mailto: [email protected]; ruf=mailto:[email protected]; fo=1:d:s" ;; Received 139 bytes from 108.162.195.88#53(jose.ns.cloudflare.com) in 33 ms What record (CNAME) were you attempting to publish? -- Todd
_______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
