I have a problem with understanding dmarc reports and some features.
I attach two reports. First one come from google.com, second one from
tumieszkamy.pl. On my server is dns zone of domain kamir-transport.pl but
whole mail service is deployed on Google - in dns zone MX points to Google
and there are all mailboxes, aliases etc. Last time I have configured dkim
and dmarc policies and I got two reports. Honestly I don't know why two,
from two different providers - google.com and tumieszkamy.pl. Moreover in
report originating from google I see IP of my server [which fails spf and
dkim policies] and I don't understand why this IP is evaluated? Second
thing which I don't understand is second report which I got from
tumieszkamy.pl.
SPF record in dns zone of domain kamir-transport.pl was looking like below
(now I changed it to slightly different):
*v=spf1 mx include:_spf.google.com <http://spf.google.com> -all*
Does anybody could help uderstand these things?
--
*Pozdrawiam / Best Regards*
*Piotr Bracha*
<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>google.com</org_name>
<email>noreply-dmarc-supp...@google.com</email>
<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
<report_id>12589122423815780587</report_id>
<date_range>
<begin>1542585600</begin>
<end>1542671999</end>
</date_range>
</report_metadata>
<policy_published>
<domain>kamir-transport.pl</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>none</p>
<sp>none</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>209.85.220.41</source_ip>
<count>8</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>kamir-transport.pl</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>kamir-transport.pl</domain>
<result>pass</result>
<selector>google</selector>
</dkim>
<spf>
<domain>kamir-transport.pl</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>54.38.202.128</source_ip>
<count>42</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>kamir-transport.pl</header_from>
</identifiers>
<auth_results>
<spf>
<domain>kamir-transport.pl</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
</feedback>
<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
<report_metadata>
<org_name>tumieszkamy.pl</org_name>
<email>dm...@tumieszkamy.pl</email>
<report_id>kamir-transport.pl:1542755608</report_id>
<date_range>
<begin>1542724697</begin>
<end>1542724697</end>
</date_range>
</report_metadata>
<policy_published>
<domain>kamir-transport.pl</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>none</p>
<sp>none</sp>
<pct>100</pct>
</policy_published>
<record>
<row>
<source_ip>209.85.217.44</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>kamir-transport.pl</header_from>
</identifiers>
<auth_results>
<spf>
<domain>kamir-transport.pl</domain>
<result>unknown</result>
</spf>
<dkim>
<domain>kamir-transport.pl</domain>
<result>pass</result>
</dkim>
</auth_results>
</record>
</feedback>
