3 ms·
DMARC is a message to other entities about what you want them to do in case DKIM/SPF fails. In this case that wouldn't help as the problem is with your entity.
by upofadown 11y ago
DMARC is a message to other entities about what you want them to do in case DKIM/SPF fails. In this case that wouldn't help as the problem is with your entity. So you would just have to reject things that fail your DKIM (or more practically, add a warning to the subject line).
- tyingq 11y agoIn this case, the parent is using Google Apps, and is receiving forged outside emails "from" their own domain, to recipients within that domain. The way to tell Google apps "don't accept outside forged emails from my domain" is a DMARC policy, combined with the pre-reqs for that. Google apps happily puts forged emails (from your own domain) into your inbox if you don't. >>DMARC is a message to other entities about what you want them to do in case DKIM/SPF fails Yes, but it also drives what your hosted Gapps/Gmail instance does with incoming forged email for your own domain. Google could provide a toggle or functionality to say what to do with failed DKIM and/or SPF more generally, for all domains...but they don't. I can tell you for sure that messages with failures for both regularly land in the inbox within my Google Apps Gmail.