1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Solve DMARC error with Infomaniak mail
This guide helps you solve various issues related to the implementation and use of a DMARC policy with your email.
Be aware of this other guide if you encounter a DMARC concern specifically when using Google services.
Error or rejection DMARC...
...lors forwarding while the initial destination address was able to receive the email (SPF error)
E-mail redirection without SRS generating SPF error
Suppose you have configured an e-mail redirect from your e-mail address "user@example2.com" to your new address "user@yourdomain3.com", without using SRS When someone sends an e-mail to "user@example2.com", it is automatically redirected to "user@yourdomain3.com" Example:
- Sender: john.doe@gmahoo1.com
- original consignee: user@example2.com
- Final destination: user@yourdomain3.com (SPF error)
By schematizing: when John sends an e-mail to "user@example2.com", the e-mail is redirected to "user@yourdomain3.com" However, the mail server of "yourdomain3.com" always sees the e-mail as coming from "john.doe@gmahoo1.com"
In detail: when John sends an e-mail to "user@example2.com", the e-mail is redirected to user@yourdomain3.com"that is, the envelope address of the sender will remain john.doe@gmahoo1.com but the recipient's envelope address will be changed with user@yourdomain3.com.
This will generate an SPF error, because the SPF of the domain gmahoo1.com does not allow SMTP servers IPs example2.com to send e-mails for his domain.
It is this FPS error that will generate the DMARC rejection.
If you want the redirection to work without error it is necessary that the provider of the email address that redirects perform the redirections with SRS.
How are the redirections at Infomaniak?
When you receive an e-mail on an Infomaniak address and it is redirected to another e-mail address, the sender's e-mail address is rewritten to reflect the redirection. Thus, the recipient's email server sees the email as coming from your own domain.
In summary, the use of SRS in e-mail redirection helps to maintain the integrity and security of e-mails while ensuring that authentication mechanisms such as SPF and DKIM remain valid.
...related to incorrect DNS input
Bad DMARC Record (Malformed DMARC Record)If the DMARC record is not properly formatted, this may result in errors. Make sure the tags and values are correctly specified.
Invalid DMARC Policy: Errors may occur if the specified DMARC policy is not correct. The possible values for politics are "none", "quarantine" and "reject". An incorrect value can cause problems.
Multiple DMARC entries: having more than one DMARC entry in the DNS area is considered an error.
If you have multiple DMARC records, email servers can interpret this in different ways, which can lead to unpredictable behaviors. Correct this by consolidating your DMARC settings into a single entry.
Check your current DMARC entry in dedicated tools like these:
...linked to a shipment that does not comply with SPF and/or DKIM
A DMARC error or rejection related to SPF or DKIM may occur if the SPF or DKIM authentication mechanisms are not properly configured or are not aligned with the domain's DMARC policy.
This can e.g. happen if you send an e-mail from your Infomaniak email address using another provider's SMTP sending server. To solve this concern:
- Check global security The Mail Service.
I send an e-mail from my Infomaniak address and receive an error email of type "Reject DMARC"
To solve this concern:
- Check global security The Mail Service.
- Perform a sending test from the Webmail mail.infomaniak.com and/or check server settings software/mail client.
I send an email from an external email address (Microsoft, Google, Yahoo, Orange, ...) and Infomaniak rejects my email with a DMARC error
To solve this concern:
- Check with its e-mail provider if the shipments are made according to their configuration recommendation and if you need to contact the e-mail sender's provider for more information.
I wish to receive an e-mail on my Infomaniak address but the sender informs me that he receives a DMARC error when sending to my address
To solve this concern:
- In this case the e-mail was blocked following the violation of the DMARC policy which the sender has put in place on his domain name; it is necessary for the sender to contact his e-mail provider or the administrator of his service to inform him of the situation.