Hello,

A customer of mine is trying to get DMARC set up on a given domain, and has
set up aligned SPF on their corporate mail server. Unfortunately, we're
seeing an issue, and I'm looking for advice on a resolution.

When someone sets up an out of office autoresponder on the corporate mail
server, those messages are not configured to use a return-path address. My
understanding is that this is the RFC-correct way to do that.

Unfortunately, when you do that, SPF evaluation then defaults to the HELO
domain. Since this customer is using a hosted email service provider, the
HELO domain belongs to their email provider and not them, which in turn
kills their alignment. Thus, DMARC failures on all autoresponders.

Thoughts on the best resolution for something like this?


Thanks,

Autumn Tyr-Salvia
tyrsalvia@gmail
atyrsalvia@agari
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to