I have the ruf= tag set already but there's nothing in the files they send that gives me any clue as to what email was failed even though the failed email came from our mail server. It makes them worthless. I'm thinking of removing the tag because I don't see anything usable in it.
At 04:34 PM 7/19/2018, Zack Aab wrote:
You can request Forensic Reports for exactly this reason using "ruf=" tag. This function is intended to essentially return a single-email-specific report for every single email that fails DMARC, but many (maybe even most) ISPs don't return Forensic Reports in the interest of the privacy of their users.
My best,
Zack Aab
Zack Aab | Senior Deliverability Strategist
M: 706.870.1061
Inbox Pros | 678.214.3739
1995 North Park Place I Suite 300 | Atlanta, GA 30339Â Â
On Thu, Jul 19, 2018 at 4:04 PM, Jerry Warner via dmarc-discuss <dmarc-discuss@dmarc.org > wrote:
- Is there a way to get additional details about a rejected email?  I set my SPF record to quarantine after running in test mode for a while and having no problems.  I've continued to watch the reports and all the valid emails were getting through, while the others were not. Perfect.  And then today, I see a record that failed, but it WAS from my server's IP so I assume it was a valid email.
- Is there some way to get more details about the message so I can take a look to see why it's failed?  I don't see anything in the reports that helps me identify who, when, or what email it was.
- _______________________________________________
- dmarc-discuss mailing list
- dmarc-discuss@dmarc.org
- http://www.dmarc.org/mailman/listinfo/dmarc-discuss
- NOTE: Participating in this list means you agree to the DMARC Note Well terms ( http://www.dmarc.org/note_well.html)
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)