DMARC Fail: Alignment reporting

Updated 4 months ago by admin

A DMARC Fail is often caused by issues with DMARC alignment, this can be easily investigated and confirmed by checking the email reports.

In the Email Activity repot open up detailed view for the affected email

More about email activity reporting can be found HERE

After that open the tab called “Headers” and look for the following header information:

  • Return Path

 

  • DKIM-Signature

The domains listed in the DKIM-Signature header should match the return path header. If this is not the case then the sender has either misconfigured their DKIM/ Outbound DMARC or the mail is a malicious attempt to impersonate a domain.

The way to resolve this is to either add a DMARC safelist exclusion or ask the sender to fix their DKIM/ DMARC policy.


How did we do?