Re: Special method required for Gmail dkim/spf verification
On 13-04-16 01:54, li...@lazygranch.com wrote: > Google sent me a "fail" on my DMARC. Everyone else seems happy. It > turns out much like Google not accepting robots.txt for some search > engines controls, they expect special fields in their DNS. > > https://support.google.com/mail/answer/6227174 This page describes use of google's feedback loop. This has nothing to do with spf, dkim and dmarc. It just gives you more insight into your delivery results. Most large mailers have such a service, and they all are specific to that party. The additional dns records are used to verify that they give access to the feedback loop to someone that actually owns the domain (or at least, can add dns entries). > > Why? Because we're Google and we can. > You misunderstood. Regards, Tom
Re: Special method required for Gmail dkim/spf verification
Yesterday's Google report had me passing. Could be related to adding the Google term to DNS. Original Message From: Tom Hendrikx Sent: Wednesday, April 13, 2016 12:38 AM To: postfix-users@postfix.org Subject: Re: Special method required for Gmail dkim/spf verification On 13-04-16 01:54, li...@lazygranch.com wrote: > Google sent me a "fail" on my DMARC. Everyone else seems happy. It > turns out much like Google not accepting robots.txt for some search > engines controls, they expect special fields in their DNS. > > https://support.google.com/mail/answer/6227174 This page describes use of google's feedback loop. This has nothing to do with spf, dkim and dmarc. It just gives you more insight into your delivery results. Most large mailers have such a service, and they all are specific to that party. The additional dns records are used to verify that they give access to the feedback loop to someone that actually owns the domain (or at least, can add dns entries). > > Why? Because we're Google and we can. > You misunderstood. Regards, Tom
Re: Special method required for Gmail dkim/spf verification
On Wed, 13 Apr 2016 17:08:57 -0700 li...@lazygranch.com wrote: > Yesterday's Google report had me passing. Could be related to adding > the Google term to DNS. > Hold the presses here. It turns out my domain was spoofed in the report that failed. The IP address used isn't mine. In the passing report, it was my IP address, which makes sense since my SPF and DKIM are fine. The offending IP address comes back to UC Berkeley. If I ever get an official answer regarding the event, I will do a follow up. Needless to say, I think the DMARC quarantine is a good idea.
Re: Special method required for Gmail dkim/spf verification
Isn't this SRS SPF about? http://www.openspf.org/SRS
