1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Resolve a DMARC error with Infomaniak email
This guide helps you resolve various issues related to setting up and using a DMARC policy with your email.
Refer to this other guide if you encounter a DMARC issue specifically when using Google services.
DMARC error or rejection...
...during a redirection while the initial destination address may have received the email (SPF error)
Email redirection without SRS generating an SPF error
Assume you have configured an email redirection from your email address "user@example2.com" to your new address "user@yourdomain3.com", without using SRS. When someone sends an email to "user@example2.com", it is automatically redirected to "user@yourdomain3.com". Example:
- sender: john.doe@gmahoo1.com
- initial recipient: user@example2.com
- final destination: user@yourdomain3.com (SPF error)
In summary: when John sends an email to "user@example2.com", the email is redirected to "user@yourdomain3.com". However, the mail server of "yourdomain3.com" still sees the email as coming from "john.doe@gmahoo1.com".
In detail: when John sends an email to "user@example2.com", the email is redirected to user@yourdomain3.com" that is to say that the sender's envelope address will remain john.doe@gmahoo1.com but the recipient's envelope address will be changed to user@yourdomain3.com.
This will generate an SPF error, as the SPF of the gmahoo1.com domain does not authorize the IP addresses of the example2.com SMTP servers to send emails for its domain.
It is this SPF error that will generate the DMARC rejection.
If you want the redirection to work without error, it is necessary that the provider of the redirecting email address performs the redirections with SRS.
How email redirections work at Infomaniak
When you receive an email on an Infomaniak address and it is redirected to another email address, the sender's email address is rewritten to reflect the redirection. Thus, the recipient's mail server sees the email as coming from your own domain.
In summary, the use of SRS in email redirection helps maintain the integrity and security of emails while ensuring that authentication mechanisms such as SPF and DKIM remain valid.
...related to an incorrect DNS entry
Malformed DMARC Record: if the DMARC record is not correctly formatted, this can cause errors. Make sure that the tags and values are correctly specified.
Invalid DMARC Policy: errors can occur if the specified DMARC policy is not correct. Possible values for the policy are "none", "quarantine", and "reject". An incorrect value can cause problems.
Multiple DMARC Entries: having more than one DMARC entry in the DNS zone is considered an error.
If you have multiple DMARC records, mail servers may interpret this in different ways, which can lead to unpredictable behavior. Fix this by consolidating your DMARC settings into a single entry.
Check your current DMARC entry in dedicated tools like the ones below:
...linked to a send that does not comply with SPF and/or DKIM
A DMARC error or rejection related to SPF or DKIM can occur if the SPF or DKIM authentication mechanisms are not correctly configured or if they are not aligned with the domain's DMARC policy.
This can happen, for example, if you send an email from your Infomaniak email address using another provider's SMTP sending server. To resolve this issue:
- Check the overall security of the Mail Service.
I send an email from my Infomaniak address and I receive a "Reject DMARC" error email
To resolve this issue:
- Check the overall security of the Mail Service.
- Perform a send test from the Webmail mail.infomaniak.com and/or check the server settings of the email software/client.
I send an email from an external email address (Microsoft, Google, Yahoo, Orange, ...) and Infomaniak rejects my email with a DMARC error
To resolve this issue:
- Check with your email provider if the sends are made in accordance with their configuration recommendation and if necessary contact the email sender's provider to get more information.
I want to receive an email on my Infomaniak address but the sender informs me that they receive a DMARC error when sending to my address
To resolve this issue:
- In this case, the email has been blocked due to a violation of the DMARC policy that the sender has set up on their domain; it is necessary for the sender to contact their email provider or the administrator of their service to inform them of the situation.