Re: [dmarc-discuss] DMARC fails for "on behalf of" messages

[Alessandro Vesely via dmarc-discuss]

> you have to try to find out users who are sending emails in a way you
> described, and ask them to change FROM address to the one matching
> sender domain (senderdomain.aaa)


Or change the bounce address while signing.  Having an SPF pass helps in case 
of DKIM hiccups.


> or you can move to REJECT policy and accept the loss of emails, sent
> by those users.


Or try quarantine with varying pct...


Best
Ale
-- 
> -- 
> Aleksandr
>  
> 07.07.2019, 14:49, "Jay 1985 via dmarc-discuss" :
> 
> we have a scenario where some users send emails "on behalf of"
> other email address. Headers appear like... 
> Sender: us...@senderdomain.aaa  
> From: us...@fromdomain.bbb  
> Return-Path:  > 
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> d=senderdomain.aaa; 
>  
> In gmail both SPF and DKIM authentication passed but this doesn't
> align with the from domain DMARC fails. How to tackle this
> situation. is there any way forward? this is the only issue
> pending to move forward in reject mode.
>  
___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

[dmarc-discuss] Help

[Ian Breeze via dmarc-discuss]

RemoveEl 9 jul. 2019 9:00 a. m., dmarc-discuss-requ...@dmarc.org escribió:Send dmarc-discuss mailing list submissions to
	dmarc-discuss@dmarc.org

To subscribe or unsubscribe via the World Wide Web, visit
	http://dmarc.org/mailman/listinfo/dmarc-discuss
or, via email, send a message with subject or body 'help' to
	dmarc-discuss-requ...@dmarc.org

You can reach the person managing the list at
	dmarc-discuss-ow...@dmarc.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of dmarc-discuss digest..."


Today's Topics:

   1. Re: DMARC fails for "on behalf of" messages (Alessandro Vesely)


--

Message: 1
Date: Tue, 9 Jul 2019 10:36:55 +0200
From: Alessandro Vesely 
To: dmarc-discuss@dmarc.org
Subject: Re: [dmarc-discuss] DMARC fails for "on behalf of" messages
Message-ID: 
Content-Type: text/plain; charset=utf-8

> you have to try to find out users who are sending emails in a way you
> described, and ask them to change FROM address to the one matching
> sender domain (senderdomain.aaa)


Or change the bounce address while signing.  Having an SPF pass helps in case of DKIM hiccups.


> or you can move to REJECT policy and accept the loss of emails, sent
> by those users.


Or try quarantine with varying pct...


Best
Ale
-- 
> --?
> Aleksandr
> ?
> 07.07.2019, 14:49, "Jay 1985 via dmarc-discuss" :
> 
> we have a scenario where some users send emails "on behalf of"
> other email address. Headers appear like...?
> Sender: us...@senderdomain.aaa ?
> From: us...@fromdomain.bbb ?
> Return-Path: 
> >?
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> d=senderdomain.aaa;?
> ?
> In gmail both SPF and DKIM authentication passed but this doesn't
> align with the from domain DMARC fails. How to tackle this
> situation. is there any way forward? this is the only issue
> pending to move?forward in reject mode.
> ?


--

Subject: Digest Footer

___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)


--

End of dmarc-discuss Digest, Vol 86, Issue 3


___
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)