On 11/15/12 6:20 AM, John Levine wrote: >> I'm new to DMARC, with very, very tiny email needs. I was in monitor >> mode for a few weeks, with forwarders being my only problem. Last >> last week I turned on Quarantine policy. > > If your domain has live users who send mail to mailing lists, use > newspaper web site mail and article to a friend, and all the other > entirely reasonable stuff that users do, that is a very poor idea, > unless you want people to throw away your users' mail. > > You need to fix your dmarc record to say p=none, and do not change the > p= to anything else, ever. > > Domains with live users can use dmarc to collect all sorts of > interesting statistics (see my scripts), but dmarc simply cannot > describe all the ways that individual users send mail. That's not > what it's for. >
I was investigating a similar issue: while being in monitor mode the only failure reports I received came from sf.net mailing list traffic forwarded to 126.com/163.com. However, their aggregate reports list the same messages as delivered because of a policy override regarding mailinglists that is in place, and my contact with their abuse department confimed that. Since I am not receiving any similar failure reports from any of the other parties that do send aggregates, I was investigating if it was correct to send failure reports for messages that are in fact covered by a policy override. I learnt today that google simply never sends failure reports, but I'm not sure about aol, yahoo, etc yet. I spent some time digging through the spec, but I didn't find any guidelines on this. Any insights? -- Tom _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
