On Thu, Jul 31, 2014 at 3:31 PM, Norman, Jean Marie via dmarc-discuss < [email protected]> wrote:
> Has anyone experienced unauthenticated emails being delivered to Google > recipients despite having a DMARC policy (quarantine or reject) in place? > We have seen evidence that unauthenticated emails (not passing both SPF and > DKIM) are being delivered to Google, despite a DMARC policy, when messages > pass through a ‘forwarder’, as noted by Google. We are trying to better > understand this behavior and whether or not anyone has found a solution? > Any insight or recommendations would be appreciated. > > > > Thanks, > > > > *Jean Marie Norman, CISSP* *|* *Visa Inc.** |* *Information Security **| > **Digital > Crimes* > > *o: (571) 439-7091 <%28571%29%20439-7091> **| **c: (571) 439-0604 > <%28571%29%20439-0604>**| **f: (650) 554-4580 <%28650%29%20554-4580>* *|* > *e:* *[email protected] <[email protected]>* > > > > > DMARC receivers can override a DMARC policy and still be compliant with the spec. They generally do this responsibly, in cases where DMARC has a well documented short coming, like mailing list traffic or broken forwarders. Sometimes bad stuff does come from sources that look like these and thus the DMARC disposition gets overridden. We have found in the past that when we report specific cases of bad messages having their DMARC policies overridden to Google, they are interested in making adjustments to correct that. -- *Mike Jones, Director of Product Management* *[email protected] <[email protected]> l M: 703.728.3978 l www.agari.com <http://www.google.com/url?q=http%3A%2F%2Fwww.agari.com%2F&sa=D&sntz=1&usg=AFrqEzfeN6IEWk_XTZnvAI-p7poxyjlAkQ>Changing Email Security For Good* <http://www.google.com/url?q=http%3A%2F%2Fwww.agari.com&sa=D&sntz=1&usg=AFrqEzd4mZ00_sT0PTWz6Ol1KrgLNpsu8w> *l* <http://www.google.com/url?q=http%3A%2F%2Fwww.facebook.com%2Fpages.agari&sa=D&sntz=1&usg=AFrqEzenk5sOQNv2kVpEwPOZa1rCMY7U1w> <http://www.google.com/url?q=http%3A%2F%2Fwww.twitter.com%2Fagariinc&sa=D&sntz=1&usg=AFrqEzcauu14S4nXj_fNJqbceMWl8MuvfA> <http://www.google.com/url?q=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fagari&sa=D&sntz=1&usg=AFrqEzfp5UPxXBRo5sHX9u4uEwTalrUpEw> <https://plus.google.com/102166045743309741150/about>
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
