reroute mail that fails dmarc

Carl94580345 36 Reputation points
2021-06-03T20:35:01.42+00:00

we have read that some universities, have there dmarc or email server forwarded failed email to a sub-domain. Like bulk.domain.tld. this is for email that cant do dkim. but i dont know how this is possible.

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
43,927 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Andy David - MVP 157K Reputation points MVP Volunteer Moderator
    2021-06-03T20:37:30.98+00:00

    Not sure what you mean, but there is no mechanism for this.
    What you have read? Can you provide the link?

    DMARC reports are forwarded to an email address in the DMARC DNS record:

    rua=mailto:******@yourdomain.com

    Note this isn't an Exchange Issue

    0 comments No comments

  2. Carl94580345 36 Reputation points
    2021-06-09T18:04:03.343+00:00

    It is this email that my director got

    We have a DMARC policy on our primary domain (domian.edu) to mark as spam email failing to pass DMARC evaluation.
    We only onboard DKIM records; the expectation is that the vendor supply us a DKIM file.
    We do not entertain requests to add SPF records for vendors, as DMARC does not require both and as SPF is a limited resource.
    For vendors which cannot supply a DKIM file, we have a second domain: bulkmail.domian.edu (aliased approved-senders.domian.edu) in which we have a DMARC policy which is set to deliver upon failing to pass DMARC evaluation.
    We have special routing rules implemented so that email sent to @approved-sender.domian.edu addresses gets delivered to corresponding @domian.edu address.
    This allows us to issue the sub-domain account/address, but no need for users to access it.
    So, user wants to send email from their account: ******@domian.edu. But vendor cannot provide DKIM and achieve DMARC compliance.
    We create ******@bulkmail.domian.edu (aliased ******@approved-senders.domian.edu).
    Vendor sends email from: ******@approved-senders.domian.edu
    Fails DMARC, but email gets delivered.
    If recipient hits reply, email gets routed to ******@domian.edu
    This has worked well for us for the last 4 years.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.