It appears that Alex Shakhov via mailop <a@sh.company> said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hello - We are currently managing several domains that are experiencing >spoofing attacks, which led us to implement a p=reject policy. We monitor >these domains through Uriports, and while all DKIM/SPF validations pass, >exceptions arise with emails routed through security providers such as >Cloudflare, Proofpoint, Mimecast, Inky, and others.
Not surprising. >Is the "reject" disposition simply noise that can be disregarded, with 100% >of these emails still being delivered due to the application of the ARC >policy? Or do these emails fail to reach their final destination? As far as I know, only Google pays much attention to ARC. If you're seeing reports that DMARC alignment failed, you have no way to tell whether the messages were delivered. Maybe the underlying mail system is set up to accept anything that Proofpoint or whatever let through, maybe not. You can be absolutely sure that you never get 100% of your mail delivered, no matter what. DMARC only makes that worse. R's, John _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
