You can, but it is not pretty. Basically, add the blackberry SPF information to your SPF. This will not do DKIM, so it will only rely on SPF to pass the DMARC test.
Also, then you now have an attack vector from any blackberry device. Fortunately blackberry SPF are organized by region, so you can limit it a bit. But it would be best for you, may be to invest in a BES, so the email is synchronized and sent from your mail servers rather than from blackberry ones. I found this article useful re blackberry SPF http://www.stardeveloper.com/articles/spf-record-for-blackberry-internet-se rvice/ But I would say if you need to go DMARC in reject mode, then BES or moving to android/iphone is the proper solution. Cheers On 10/5/12 9:45 AM, "John Levine" <[email protected]> wrote: >>I have a question on how to get a DMARC policy to work when some of my >>email >>is sent via blackberry BIS. > >That's easy -- you can't. > >DMARC policies can work well on domains whose mail is sent from a >single set of fixed sources. They won't work at all on mail domains >with live people who invariably send mail in all sorts of different >ways that SPF and DKIM don't describe. > >But it's still worth publishing a DMARC record with p=none to collect >the statistics. That's what I do, and I find out all sorts of >interesting stuff. > >Regards, >John Levine, [email protected], Primary Perpetrator of "The Internet for >Dummies", >Please consider the environment before reading this e-mail. http://jl.ly >_______________________________________________ >dmarc-discuss mailing list >[email protected] >http://www.dmarc.org/mailman/listinfo/dmarc-discuss > >NOTE: Participating in this list means you agree to the DMARC Note Well >terms (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
