0

I've set up DKIM on my domain and configured Postmark to send me a DMARC Daily Digest to monitor that everything is set up correctly. Each week, I have around half of my emails sent through Google marked as not DKIM aligned:

Not DKIM aligned

Any idea to how to track down the problem. I'm pretty confident, that I've correctly configured the email correctly in G Suite, which the 100% indicators on the two other IPs also show.

2
  • 1
    Can you look at the raw DMARC data? Do you have access to the actual DMARC aggregate reports? If so, you might determine what is happening. For example, which servers/services are reporting the misalignment? If it's Google, you might very well be dealing with recipients also on Google, forwarding emails by Distribution Group, which will in turn generate misaligned emails. But without the actual reports (and possibly even with the reports) I'm just guessing here. Can you access / provide such data / report?
    – Reinto
    May 6, 2019 at 15:01
  • I think you are right there. I don't have access to the raw data, but the type of emails I'm sending, are good candidates for distribution lists. Thanks. Maybe convert your comment to an answer? May 6, 2019 at 15:33

1 Answer 1

0

Many times, seeing DKIM (and / or SPF) misalignment in DMARC aggregate reports comes down to forwarding. In this particular case, you are likely seeing recipients hosted on Google having Distribution Groups forwarding to internal addresses. Google adds these DMARC authentication results to the DMARC aggregate reports it sends out, even though they are internally routed messages.

I've written an answer on this matter before here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.