Hi Olga,

Great that GMail is taking the next step in implementing DMARC!

At the moment I'm experiencing some issues getting a mail forwarded from a
Google Apps account to another account. Perhaps this can be DMARC related,
it would be great if you could investigate this.

The situation is:
- Google Apps account with 2 domains linked to it (domain A, domain B)
- Both domains have DMARC monitor policy
- A mail was sent from domain B to some recipients. (this mail is delivered
OK)
- This mail is forwarded (from domain B) to domain C (another Google Apps
domain, no DMARC policy)
- This mail bounces:

Delivery to the following recipient failed permanently:

     user@DOMAIN_C

Technical details of permanent failure:
Message rejected by Google Groups. Please visit
http://mail.google.com/support/bin/answer.py?hl=en&answer=188131 to review
our Bulk Email Senders Guidelines.

---- Info from the header ----

Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of user@DOMAIN_B designates
2607:f8b0:4003:c01::22a as permitted sender) smtp.mail=user@DOMAIN_B;
       dkim=pass header.i=@DOMAIN_B;
       dmarc=pass (p=NONE dis=none) d=DOMAIN_B

- When I forward it using domain A to  domain C it also bounces:
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of user@DOMAIN_A designates
209.85.219.44 as permitted sender) smtp.mail=user@DOMAIN_A;
       dkim=pass header.i=@DOMAIN_A;
       dmarc=pass (p=NONE dis=none) d=DOMAIN_A

I can send you additional info in a PM if you need it.

Met vriendelijke groet,

Michiel van de Vis
*Managing partner*
(ik ben afwezig tussen 24 april en 12 mei)
 <http://www.e-ngine.nl/> *eFuture B.V.*
Laapersveld 53
1213 VB Hilversum E-ngine is powered by <http://www.efuture.nl/>  Tel:
Fax:
E-mail:
Website:
KvK:
+31 (0)35 531 1115
+31 (0)35 531 2150
[email protected]
www.efuture.nl
30174751 ReturnPath Partner Bezoek onze website voor meer informatie:
www.e-ngine.nl - Download de Brochure
(PDF)<http://www.e-ngine.nl/wp-content/uploads/2013/01/E-ngine-Product-Sheet.pdf>
<https://twitter.com/enginenl> <http://www.linkedin.com/company/e-ngine-bv>








2013/4/5 Olga Gavrylyako <[email protected]>

> Hi All,
>
> Yes Gmail started adding dmarc information to Authentication-Results
> header. It is amazing that you noticed the change just a couple of days
> after the launch!
> This is our first experiment and I am pretty sure the format of the data
> will evolve in the future. We are open for suggestions.
> Let me explain the new record:
>
> dmarc=fail (p=REJECT dis=none) d=junc.eu
> dmarc=fail -- DMARC authentication failed.
> d=junc.eu  -- we applied dmarc policy for junc.eu domain
> p=REJECT  -- junc.eu published 'reject' policy
> dis=none (disposition=none) -- means that Gmail applied "none" policy
> instead of "reject". Most probably this happened because the message was
> forwarded.
>
> Finally the message ended-up in the spam folder based on some other
> conditions, not related to DMARC.
>
> Please let me know if you have questions.
> Thank you,
>  Olga
>
>
>
>
>
>
> On Wed, Apr 3, 2013 at 2:59 PM, Andy Wilson <[email protected]>
> wrote:
> >
> > Has anyone else noticed Google are now inserting a dmarc result into
> their AR?
> > I just noticed this from an email Benny sent (which ended up in spam due
> to p=reject)
> >
> > Authentication-Results: mx.google.com;
> >        spf=pass (google.com: domain of
> [email protected] designates 208.69.40.157 as permitted
> sender) [email protected];
> >        dkim=pass [email protected];
> >        dmarc=fail (p=REJECT dis=none) d=junc.eu
> >
> >
> > Can anyone from Google comment on the use of this header, not quite sure
> what dis=none means
> >
> > --
> > Regards
> >
> > Andy
> >
> > _______________________________________________
> > dmarc-discuss mailing list
> > [email protected]
> > http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> >
> > NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
> >
>
> _______________________________________________
> dmarc-discuss mailing list
> [email protected]
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
>
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to