Forum Discussion
If you change ISP you won't able able to continue using their email! So, set up a new email account, e.g.Gmail, and forward to that account.
- ravenstar682 months agoVery Insightful Person
While the other two aren't wrong, they're not really addressing your issue.
DMARC does not work in isolation. It uses SPF and/or DKIM tested against the domain in the From: address of a sent email.
If mail passes either DKIM or SPF checks then DMARC passes.
If mail fails both checks then DMARC fails.
When you use mail forwarding SPF automatically fails as this checks that the mail server connecting to the receiving system - In this case Virgin Media's, is authorised to send mail for a particular domain.
Therefore in order for a forwarded mail to pass DMARC, it must be authenticated successfully via DKIM, which means the body = and specified headers in the mail MUST NOT be altered.
What you'd possibly need to check what is happening is for the same mail to be sent to both addresses, so you can compare the two received mails.
I note that the forwarding service uses sender rewriting scheme in order to deal with SPF checks. SRS never made it past the draft stage of the RFC's and really should not be in use anymore.
I'd be interested in sending you a couple of test mails from my own domain so we can see if both pass or fail.
If you are willing I'd like to send you a PM so I can get the addresses to send to.
Note: I'm not a Virgin Media employee - however the VIP status is a special status granted to users by Virgin Media, if they have been determined to be particularly helpful.
- jameswyper2 months agoJoining in
Thank you very much for the offer of help. I've DM'd you.
I've also, as a test, sent emails from another account I have (a yahoo.co.uk one), firstly directly, then secondly via the forwarding service. I've put the headers of the emails on Google Drive - you should be able to access them with this link. They might tell you more about what's going on without you needing to send me further tests.
https://drive.google.com/drive/folders/1zx_RRJ45cfEtYkLSXbODqZ5fF1ap0yET?usp=sharing
I've also included the headers for the email that cantab.net received before forwarding it on in case that's useful (they have a webmail interface which I don't normally use but I filched it from that).
- ravenstar682 months agoVery Insightful Person
Based on what I'm seeing in the headers, the rejection is Virgin Media's email system working as expected.
I note both the Yahoo mails show as a DMARC pass as do both of my mails.
At a guess the senders email service is not using DKIM. It would be nice to see the headers of the mail sent directly to you from the affected sender in order to confirm this.
Just so I can clarify how the SPF results show as pass but the DMARC can fail.
Using my mail as an example:
Sent directly
spf=pass (51.68.196.229;timothydutton.co.uk); dkim=pass header.d=timothydutton.co.uk; dmarc=pass header.from=timothydutton.co.uk (p=quarantine sp=quarantine dis=pass)
received via forwarder
spf=pass (94.76.243.214;srs.aluminati.net); dkim=pass header.d=timothydutton.co.uk; dmarc=pass header.from=timothydutton.co.uk (p=quarantine sp=quarantine dis=pass)
Note that the SPF passes as the sending service is using SRS however were I not using DKIM the only check that could be done is against SPF
The Mail From: domain in the SPF check MUST match the From: domain in order for the DMARC to pass SPF
However because DKIM passes, the failed SPF check doesn't matter in my case.
It's very much upon the sending parties mail provider to configure their DKIM as well as SPF in order to avoid rejections like this.
Tim
Related Content
- 6 months ago
- 10 months ago