Friday, July 1, 2016

email - SPF and DKIM help: Do the FAIL reports from DMARC indicate an issue?

I am having trouble determining if my SPF and DKIM are configured properly. Here are key details:





  • My domain is mysteryscience.com

  • We send mail from google apps, from SendGrid, and from Intercom. All seem to be working properly, although I do hear cases of our emails getting flagged as spam which is why I'm investigating this.

  • I have enabled SPF, DKIM, and DMARC

  • My SPF record seems to be semantically correct (checked here: http://www.kitterman.com/spf/validate.html)

  • My SPF TXT record is: v=spf1 ip4:198.21.0.234 include:_spf.google.com include:spf.mail.intercom.io -all

  • 198.21.0.234 is my dedicated IP address for sending through SendGrid (mail.mysteryscience.com is my CNAME forwarding to them)



I have enabled DMARC and I'm reviewing the emails I get from various mail servers. While reviewing my results from Google.com I noticed a bunch of SPF and DKIM fails. It looks like these may have been rejections of legitimate emails I sent, but I'm not sure how to read this file. Here are a few of the results, note the "fail" on a few of the < dkim > and < spf > lines. And here is a dmarcian processed version of the XML file: https://dmarcian.com/dmarc-xml/details/Ybk591jex3JpVBmW/






207.46.163.143
1

none
pass
fail




mysteryscience.com



mysteryscience.com
pass



granderie.ca
pass





209.85.212.178
1


none
fail
pass



mysteryscience.com




mysteryscience.com
pass





2607:f8b0:4001:c05::232
1


none
pass
fail



mysteryscience.com




mysteryscience.com
pass


mail.mysteryscience.com
fail






198.236.20.44
1

none
pass
fail




mysteryscience.com



mysteryscience.com
pass


mail.mysteryscience.com
fail






209.85.212.175
1

none
fail

pass



mysteryscience.com



mysteryscience.com
pass






209.85.215.44
1

none
fail

fail



mysteryscience.com



nurturingwisdom.com
fail






2607:f8b0:4003:c06::236
2

none
pass

fail



mysteryscience.com



mysteryscience.com
pass



ssanpete.org
none







Can anyone help me determine if these SPF and DKIM fails are problematic?

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...