There is definitely a heavy correlation:
root@zmta1:/var/log# for i in $(grep "Message lacks SPF/DKIM/DMARC" syslog.1 |
awk -F'from=' '{print $2}' | awk '{print $1}' | awk -F'@' '{print $2}' | sort | uniq); do
dig TXT _dmarc.$i | grep NXDOMAIN; done | wc -l
286
root@zmta1:/var/log# grep "Message lacks SPF/DKIM/DMARC" syslog.1 | awk
-F'from=' '{print $2}' | awk '{print $1}' | awk -F'@' '{print $2}' | sort | uniq | wc -l
367
On Nov 8, 2026 at 3:02 AM, Dan Malm via mailop <[email protected]> wrote:
On 11/7/26 00:10, Jarland Donnell wrote:
> > 550 5.7.1 Message rejected: Message lacks SPF/DKIM/DMARC Auth Records
> (AS9031519)
>
> _______________________________________________
> mailop mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
Can confirm I'm seeing this as well, but after some digging it seems it
only happens when a TXT for dmarc returns a NXDOMAIN result.
I have two groups of domains, one group serves an NOERROR response
without any result if they don't have the DMARC record. The other serves
an NXDOMAIN. Only the NXDOMAIN group seems affected by this.
--
BR/Mvh. Dan Malm, Systems Engineer, one.com
_______________________________________________
mailop mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
mailop mailing list -- [email protected]
To unsubscribe send an email to [email protected]
