I have sendmail 8.17.1.9 running my personal email accounts. I have set
up DKIM and have specified a DMARC record in my DNS. I have that
configured to send me status emails. My question is why I have so many failures. The message I get often show failures of DKIM but SPF passes.
There is no explanation why they failed. In the _dmarc record I have p=quarantine and ptc=100. My SPF record specifies -all.

The failure rate is probably 20% on DKIM and hardly ever on SPF. Do I
need to look for something here?

Thanks,

--

Knute Johnson

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 22.02.2024 um 09:08 Uhr Knute Johnson wrote:

I have sendmail 8.17.1.9 running my personal email accounts. I have
set up DKIM and have specified a DMARC record in my DNS. I have that configured to send me status emails. My question is why I have so
many failures.

Set up another test server that checks DKIM, SPF and DMARC and check
what those tools report in the logs.

--
kind regards
Marco

Send spam to muell456@cartoonies.org

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

First and foremost, not sponsored. Those are a few tools I've found out there that helped me troubleshoot these and other problems myself.

https://dkimvalidator.com/
https://easydmarc.com/tools/
https://dmarcian.com/domain-checker/

This might give you some hints on where to look next.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)