This guide helps you solve various issues related to the implementation and use of a DMARC policy with your email.

Be aware of this other guide if you encounter a DMARC concern specifically when using Google services.

Error or rejection DMARC...

...lors forwarding while the initial destination address was able to receive the email (SPF error)

E-mail redirection without SRS generating SPF error

Suppose you have configured an e-mail redirect from your e-mail address "user@example2.com" to your new address "user@yourdomain3.com", without using SRS When someone sends an e-mail to "user@example2.com", it is automatically redirected to "user@yourdomain3.com" Example:

• Sender: john.doe@gmahoo1.com
• original consignee: user@example2.com
• Final destination: user@yourdomain3.com (SPF error)

By schematizing: when John sends an e-mail to "user@example2.com", the e-mail is redirected to "user@yourdomain3.com" However, the mail server of "yourdomain3.com" always sees the e-mail as coming from "john.doe@gmahoo1.com"

In detail: when John sends an e-mail to "user@example2.com", the e-mail is redirected to user@yourdomain3.com"that is, the envelope address of the sender will remain john.doe@gmahoo1.com but the recipient's envelope address will be changed with user@yourdomain3.com.

This will generate an SPF error, because the SPF of the domain gmahoo1.com does not allow SMTP servers IPs example2.com to send e-mails for his domain.

It is this FPS error that will generate the DMARC rejection.

If you want the redirection to work without error it is necessary that the provider of the email address that redirects perform the redirections with SRS.

How are the redirections at Infomaniak?

When you receive an e-mail on an Infomaniak address and it is redirected to another e-mail address, the sender's e-mail address is rewritten to reflect the redirection. Thus, the recipient's email server sees the email as coming from your own domain.

In summary, the use of SRS in e-mail redirection helps to maintain the integrity and security of e-mails while ensuring that authentication mechanisms such as SPF and DKIM remain valid.

...related to incorrect DNS input

Bad DMARC Record (Malformed DMARC Record)If the DMARC record is not properly formatted, this may result in errors. Make sure the tags and values are correctly specified.

Invalid DMARC Policy: Errors may occur if the specified DMARC policy is not correct. The possible values for politics are "none", "quarantine" and "reject". An incorrect value can cause problems.

Multiple DMARC entries: having more than one DMARC entry in the DNS area is considered an error.

If you have multiple DMARC records, email servers can interpret this in different ways, which can lead to unpredictable behaviors. Correct this by consolidating your DMARC settings into a single entry.

Check your current DMARC entry in dedicated tools like these:

• https://dmarcadvisor.com/dmarc-check
• https://mxtoolbox.com/dmarc.aspx

...linked to a shipment that does not comply with SPF and/or DKIM

A DMARC error or rejection related to SPF or DKIM may occur if the SPF or DKIM authentication mechanisms are not properly configured or are not aligned with the domain's DMARC policy.

This can e.g. happen if you send an e-mail from your Infomaniak email address using another provider's SMTP sending server. To solve this concern:

• Check global security The Mail Service.

I send an e-mail from my Infomaniak address and receive an error email of type "Reject DMARC"

To solve this concern:

• Check global security The Mail Service.
• Perform a sending test from the Webmail mail.infomaniak.com and/or check server settings software/mail client.

I send an email from an external email address (Microsoft, Google, Yahoo, Orange, ...) and Infomaniak rejects my email with a DMARC error

To solve this concern:

• Check with its e-mail provider if the shipments are made according to their configuration recommendation and if you need to contact the e-mail sender's provider for more information.

I wish to receive an e-mail on my Infomaniak address but the sender informs me that he receives a DMARC error when sending to my address

To solve this concern:

• In this case the e-mail was blocked following the violation of the DMARC policy which the sender has put in place on his domain name; it is necessary for the sender to contact his e-mail provider or the administrator of his service to inform him of the situation.

This guide explains how the mobile app works Infomaniak Mail (app for iOS/Android smartphone or tablet) during its first opening after installation and subsequent connections.

Start Configuration Wizard

At the first opening of the app, a step-by-step assistant offers you to choose the theme (pink or blue accent color) that you can also choose amend thereafter It also shows you the main ergonomic functions available with the application (long support, slip).

At the last step you can...

• ... create an account that is to say to get a new free email address…
• ... or simply log in with your usual IDs (your e-mail address to Infomaniak).

Several email addresses

Once connected, with the possible two-factor authentication (A2F) performed, you will find all email addresses already attached to Infomaniak Mail which you used to consult on your web browser via the address mail.infomaniak.com.

You can Toggle from one address to the other...

1. ... by clicking on the top left of your inbox:
   
2. ... then on the chevron ‍ to the right of your email address that appears:
   

For to attach an additional one, click on the button at the end of the list or read this other guide:

For Remove one, be aware of this other guide.

Several user accounts

Imagine that in addition to your personal user account with your attached preferred email addresses, you get from your employer a login ID to a user account with different email addresses of the company within this professional account...

To add the additional user account:

1. Click on the top right of the inbox:
   
2. Click on Add Account to log in to the desired Infomaniak user account:
   

To switch easily from one user account to another:

1. Click on any of the attached user accounts, and see the email addresses attached to these accounts:
   

To detach a user account attached to the application and no longer be able to view the email addresses attached to this account, just...

1. ...you go there one last time
2. ... then click on the top right on the user menu
3. ... and then disconnect at the bottom of the screen:
   

You will automatically be switched to one of the remaining accounts.

This guide offers the most common IMAP server addresses. These can be used to achieve the copy of content from your old e-mail addresses to your Infomaniak email address.

IMAP server addresses

This guide presents the operation of the LBRs, the questionable policy of some of them and the means to resolve a possible email blockage.

Preamble

• The RBL (Realtime Blackhole List) or DNSBL (Black List DNS) are lists containing addresses / IP / names of suppliers / servers, known as large spam transmitters.
• These are often large, generalised blacklists (blacklists), which can be used to identify messages that are considered undesirable and those that send them, which some providers maintain (smtpcheck, uceprotect: non-exhaustive list)…

Adding email address to RBL

When an email address is identified as belonging to an undesirable sender, it is blocked to prevent the receipt of unsolicited mail. A blockage in the RBL does not expire. Addresses will be listed indefinitely.

If you receive a message that your email address is blocked by RBL, this means that the Infomaniak security system has detected suspicious or undesirable activities associated with this email address. This may include mass sending of unsolicited mail, participation in phishing campaigns or other malicious behaviors.

Solve an email block (RBL)...

... if the error mentions your address and RBL

If you get type errors

anna.a@domain.xyz is rbl blacklisted - http://chk.me/rbl

when sending an e-mail and you think it's a false positive, contact Infomaniak support.

To prevent your email address from being blocked by the RBL blocking system in the future, follow the best practices of using email:

1. Don't send unsolicited mail or mass message to unknown recipients.
2. Sort regularly the recipient list used.
3. Do not participate in phishing or cybercrime activities.
4. Make sure you have the best level of security where your e-mails are used:
   1. strong password
   2. up-to-date software
   3. operating system (iOS, Android, Windows, macOS, etc.) up-to-date
   4. configuration of the associated domain up-to-date

... if the error mentions an organism like Sorbs or Barracuda

If you get type errors

554 5.7.1 Client host blocked using sorbs

or similar:

1. Follow the procedure of the organization mentioned (e.g. http://www.barracudacentral.org) to get your address deleted from the list.
2. Temporarily change your Internet access provider or connection method - WIFI vs 4G/5G - to send your messages.
3. Inform your correspondent and their mail provider to do the necessary and/or no longer use an unreliable LBR.
4. Wait a few hours and try again.

Less and less professionals (ISP, hosting companies, etc.) use standard providers Backscatterer / UCEPROTECT and there are a lot of other very effective lists, such as ABUSIX or SPAMCOP, well-maintained and whose real purpose is to fight spam, one of the priorities of Infomaniak.

This guide explains how to connect the Thunderbird email application to an email address hosted with Infomaniak.

Prerequisites

• create the address within an Infomaniak Mail Service (or with the free ik.me offer)
• test the password of the email address (do not confuse it with the one used to log in to the Infomaniak interface)
• check on the Mail Service that the automatic diagnostic is correct

Add the email address to the application

To configure the email application:

1. download the latest version of Thunderbird
2. open the application
3. check and complete missing information
   
4. click on Continue
5. the information found by Thunderbird about your mail provider is displayed, leave IMAP selected:
   
6. click on Finish
7. in some cases, a warning about a certificate may appear, just confirm the security exception if the information mentions Infomaniak:
   
8. the summary of your registration appears, click on Finish to add the address (or configure other services from there):
   
9. there you go, your email address is now configured in the application:
   
   

Settings to use

• IMAP/SMTP server name mail.infomaniak.com
• IMAP port 993 (SSL)
• SMTP port 465 (SSL)
• username full email address
• password email address password
• mandatory authentication (learn more)

In case of problems

Do not contact Infomaniak Support if your email address works well outside the application. The most common error concerns the use of an incorrect password. Our troubleshooting guides help you solve any problems:

• follow the solutions given in this guide (click here) regarding email in general
• this guide (click here) specifically concerns Thunderbird

and if your Thunderbird no longer works after changing your email password, read this guide (click here).

This guide explains what DKIM to add to secure Infomaniak messaging if it is structured around a domain name whose DNS are Cloudflare.

Preamble

• If you manage your e-mails at Infomaniak, as well as the associated domain name, but the DNS management is at Cloudflare, then you need to add a DKIM to the Cloudflare interface.

Add DKIM to Cloudflare

Prerequisites

• Be aware of this other guide to allow you to display the DKIM corresponding to your Infomaniak email.
• Display the DKIM so you can copy and paste it. Example:
  • 

Then follow the procedure below to enable DKIM correctly improving the security and delivability of emails for the domain concerned:

1. Click here to access your Cloudflare account.
2. Select the domain concerned.
3. In the DNS section, search for and delete all NS records for "_domainkey"pointing towards Infomaniak.
4. Add a new TXT record for DKIM (it's not enough to paste the visible DKIM signature on the Infomaniak Manager to make it work):
   1. Type : TXT
   2. Nom : Enter only the DKIM selector provided by Infomaniak (without "_domainkey" or the domain name) therefore e.g. 20240112…
   3. Contenu : Paste the DKIM public key provided by Infomaniak (which comes after p=)
   4. TTL : Auto
5. Save the changes.
   • Any DNS addition/amendment may take up to 48 hours to spread.
6. Use an online DKIM verification tool to confirm the configuration.

This guide explains how to manage and modify permissions (change of password, setting up an alias, etc. see below for the complete list) of a Infomaniak user, so that they can manage more or less configuration elements on the web app Mail Infomaniak (online service) mail.infomaniak.com).

Preamble

• The email address is first created within a Mail Service and then it can be used within one or more Mail Infomaniak interfaces by one or more users.
• The creator (or manager) of the address may want limit possible actions for any user who will use the email address.
• This fine management of permissions can be done when creating an address or after, and you can also define what should be default rights for any new address created (read Global Configuration below).

List of actions on an email address

Actions	Descriptions
Change Password	Allows change password of the e-mail address
Manage the answering machine	Allows to create a message of absence (automatic response)
Manage signatures	Allows to add signatures and manage response email addresses
Manage redirections	Allows redirect your e-mails to one or more other e-mail addresses
Manage aliases	Allows you to create variants of your email address (change from what is before the @)
Managing rules	Allows you to manage the filters anti-spam and advertising and allows the creation of rules to automatically classify your emails in folders in your mailbox
Manage folder configuration	Allows Customize IMAP folders (frosts, messages sent, spam, trash, archive) of your Infomaniak email address with the folders of your software/mail client (Outlook, Apple Mail, Thunderbird, Spark, etc.)
Managing Security	Allows you to manage the blocked and approved addresses

Manage permissions granted to an email address user

1. Click here in order to access the management of your product on the Manager Infomaniak (Need help?).
2. Click directly on the nameallocated to the product concerned.
3. Click on the email address concerned in the table that appears.
4. There are two ways to change the permissions of an email address:
   1. Click on the action menu ⋮ located to the right of the user name of the email address.
   2. Select Change fees:
      
5. Or click directly on parameter icons of the e-mail address in the user's e-mail address:

Global Configuration

This guide explains how to view the folders of your Infomaniak mailbox with a software/mail client thanks to IMAP protocol.

Preamble

• The different generic folders are created by Mail Infomaniak at the very first connection at the interface.
• Therefore, some IMAP software/message clients may not show a folder if no prior connection has been made to Mail.
• And if they are well present in Mail, it may still be that some folders do not appear on your email software/client configured in IMAP.

Force synchronization of IMAP folders...

... on Microsoft Outlook

It may happen in some cases, after setting up an Infomaniak address in Outlook software/mail client that some folders do not appear. In this case it is necessary to check synchronization with subscription folders In Outlook:

1. Start Outlook software on your computer.
2. From your Infomaniak email address, right click on the folder Inbox.
3. Select Imap folders :
   
4. Uncheck the option: When displaying hierarchy in Outlook, display only folders that are subject to subscription
   
5. Click on Apply.

...on Thunderbird

It may happen in some cases, after setting up an Infomaniak address in Thunderbird software/mail client that some folders do not appear. In this case it is necessary to manually check these folders from the subscription menu Thunderbird:

1. Start Thunderbird software on your computer.
2. Right-click the relevant Infomaniak address and select the menu Subscribe:
   
3. Check the missing folders.
4. Click on Okay. to validate the selection.

... elsewhere

In your regular mail client/software, find the name "IMAP folders" and/or "subscribe", "subscription" etc. Search otherwise in a possibleTOOLS menu... Be aware of these research results for more information.

Edit Synchronized Folders

Be aware of this other guide to change the location of some generic folders.

This guide presents the main features of a Mail Service Infomaniak. Discover the administration interface of your email addresses created and hosted by Infomaniak.

Access Service Mail

To access the Service Mail:

1. Click here in order to access the management of your product on the Manager Infomaniak (Need help?):
   1. Order a new Mail Service (to obtain email addresses on a new domain name, e.g.).
   2. Search among your Mail Services.
   3. Options for sorting and presenting the table.
   4. The name of your Mail Service (attention, it can be renamed (see point H) to facilitate its organization but the domain associated with and visible on the flyover (see point F) will remain the same).
   5. The number of email addresses created and available (here the quota is 1 and no address has been created).
   6. The domain(s) associated with your Mail Service; be aware of this other guide to change the domain name of your Mail Service.
   7. Label(s)/Tags possible.
   8. Action menu for rename the Mail Service or amend the offer.

Access e-mail addresses

To access the e-mail addresses contained in this Mail Service:

1. Click directly on the name of the Mail Service relevant in the table (see image above).
2. You get to this type of page:
   
   1. Breadcrumb and the name of the Service Mail (possibly renamed as in this example).
   2. Management menu of the Mail Service, allows actions that the M point of the previous table does not allow.
   3. Create additional email addresses (or order them first if the quota is not sufficient).
   4. Current quota.
   5. Download the list of addresses to a CSV file (format .csv).
   6. Search among the addresses of the Service Mail (unlike the search bar above that allows you to search among all the products of the organization).
   7. Filter the display according to different criteria including user login dates (see point H).
   8. Show in the table a user's last connection to the Mail Infomaniak interface in which the email address in question is attached.
   9. Options for presenting the table.
   10. In front of each email address is a small square that can be clicked and allows to select multiple addresses at the same time in order to carry out actions (proposed at the bottom of the page as soon as the selection is made - cf point N).
   11. The user(s) of the Mail Infomaniak interface who linked the email address in question.
   12. By clicking on the icons it is possible to access the options; if the icon is greyed or absent, this indicates that the option in question is not enabled.
   13. Actions on the email address.
   14. Mass actions on the email addresses selected in the table (see point J).
   15. Global configuration (concerns the entire Mail Service in question) to e.g. apply a signature or antispam to the entire Service Mail.
   16. Actions on the domain(s) related to the Service Mail.
   17. Global security to perform a technical diagnosis.

Access details and settings of an email address

To access the settings and information concerning the e-mail address (storage, password, etc.) and users of the Mail Infomaniak app (so excluding IMAP use) who use the email address:

1. Click directly on the e-mail address in the table (see image above).
2. You get to this type of page:
   
3. Click on the different tabs on the top of the page to set the different settings of your email address.

This guide explains how to add or edit an MX record in the DNS (domain name) area managed on the Manager Infomaniak.

Preamble

• The type of registration is used to indicate which provider to manage the mail (= target).
• You should only change this type of registration if you have a particular configuration to set up (e.g. domain name at Infomaniak and email service at an external provider).
• There may be several MXs (for a second messaging service to take over in the event of a failure of the first) and in this case a number designates the priority of each of them (the smaller the number, the higher the priority).

MX for e-mail Infomaniak

Infomaniak automatically informs the MX needed to link your domain name and email, if they are managed in the same organization at the level of the Manager.

If your configuration requires you to add an MX record to direct mail traffic to Infomaniak, then specify the following MX:

mta-gw.infomaniak.ch

with priority 5.

On the interface of some providers like Gandi, it is necessary to add a point at the end of the MX record:

mta-gw.infomaniak.ch.

One SPF registration correct is also required for a smooth functioning of the Infomaniak messaging.
 

Edit DNS area

Be aware of this other guide to manage this type of recording in a DNS area.

Read more

• Link a domain to a Service Mail Infomaniak
• Specify the MX Infomaniak at a third party web provider