Re: [dmarc-discuss] DMARC Aggregate Reports
John Dutfield via dmarc-discuss wrote on 2022-02-17 10:22: What does a missing envelope address in the XML reports indicate? It depends on whether the field is missing entirely, or whether it has an empty value . A missing usually indicates that the reporter uses an old report format and omits reporting the envelope from address. This old format can be recognized by having no field. An empty usually indicates a report about a bounce, i.e., a message sent with a null envelope MAIL FROM: <>. When reviewing the reports there are lot reports that do not include the envelope address, are these an indicator that the emails where forwarded or undeliverable messages? No. Regards, Matt ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
Re: [dmarc-discuss] DMARC Aggregate Reports
Hi Ahsan When you say logs do you mean the aggregate reports? And what is it I should be looking for? As far as using the reports for the purpose of moving to SPF hard Fail and DMARC = Quarantine should we filter out the records where the Envelope address is null? Thanks John Dutfield Senior Infrastructure Specialist - Unified Comms Bluebell House, Brian Johnson Way, Preston, Lancashire, PR2 5PE T: +44 1772 216000 | W: www.rsmuk.com<http://www.rsmuk.com> RSM UK supports flexible working so you may receive emails at times that fall outside of your own working hours. Please reply when it is convenient for you. From: ahsan2...@gmail.com Sent: 17 February 2022 10:02 To: John Dutfield Cc: dmarc-discuss@dmarc.org Subject: Re: [dmarc-discuss] DMARC Aggregate Reports Please note : this email has originated from outside of our organisation. Hi John Are those bounce messages or NDR messages. Probably a detailed look into the logs could identify that. Regards Ahsan On Thu, Feb 17, 2022 at 2:57 PM John Dutfield via dmarc-discuss mailto:dmarc-discuss@dmarc.org>> wrote: What does a missing envelope address in the XML reports indicate? When reviewing the reports there are lot reports that do not include the envelope address, are these an indicator that the emails where forwarded or undeliverable messages? John Dutfield Senior Infrastructure Specialist - Unified Comms Bluebell House, Brian Johnson Way, Preston, Lancashire, PR2 5PE T: +44 1772 216000 | W: www.rsmuk.com<http://www.rsmuk.com> RSM UK supports flexible working so you may receive emails at times that fall outside of your own working hours. Please reply when it is convenient for you. ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org<mailto:dmarc-discuss@dmarc.org> http://www.dmarc.org/mailman/listinfo/dmarc-discuss<http://www.dmarc.org/mailman/listinfo/dmarc-discuss> NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html<http://www.dmarc.org/note_well.html>) ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
Re: [dmarc-discuss] DMARC Aggregate Reports
Hi John Are those bounce messages or NDR messages. Probably a detailed look into the logs could identify that. Regards Ahsan On Thu, Feb 17, 2022 at 2:57 PM John Dutfield via dmarc-discuss < dmarc-discuss@dmarc.org> wrote: > What does a missing envelope address in the XML reports indicate? > > > > When reviewing the reports there are lot reports that do not include the > envelope address, are these an indicator that the emails where forwarded or > undeliverable messages? > > > > > > > > *John Dutfield* > Senior Infrastructure Specialist - Unified Comms > > Bluebell House, Brian Johnson Way, Preston, Lancashire, PR2 5PE > *T:* +44 1772 216000 | *W: *www.rsmuk.com > > RSM UK supports flexible working so you may receive emails at times that > fall outside of your own working hours. Please reply when it is convenient > for you. > > ___ > dmarc-discuss mailing list > dmarc-discuss@dmarc.org > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
