Received a bunch of dmarc reports identifying groups.io is a "threat"
|
Michael, Received 11 reports last night. I've never seen one of these before, is this what you get by having a DMARC entry in your mailserver? I attached one.? I am not a expert at these.? ? I think the DMARC consortium has documentation and resources for interpreting these reports. You might want to check with one of their mailing lists. In any case it is not something that affects normal Groups.io users and isn't likely anything that Groups.io can help you with. normally I ignore the 1 or 2 I receive.? But to get 11 in one night. As I understand it, a participating email service will send you either summary or detailed reports. How many reports you get should depend on how many participating email services received messages you sent (by way of Groups.io or otherwise). Your messages that go through Groups.io will fail DMARC, but that's generally harmless because you've published a policy of "none". These are not "threats", just notifications of what authentication results the various receiving services obtained when evaluating your messages. Your messages that go through Groups.io will pass SPF and DKIM (Groups.io's server is properly configured for that), which is good enough for most receiving email services to deliver your messages. Shal -- Help: /static/help More Help: /g/GroupManagersForum/wiki Even More Help: Search button at the top of Messages list |
|
Michael,
But suddenly getting over 10 two days in a row is concerning.I doubt there's any cause for concern, given what the DMARC reports are for. It might mean that one or more of your subscribed groups had an increase in membership, but maybe not even that. All mentioning groups.io as the issue.Groups.io IS the issue. But it is neither a threat nor a malfunction nor anything else of great significance. The issue is that Groups.io passes your email header From address through without munging (replacing) it. That simple fact means that your messages fail DMARC authentication at the receiving service because the message says it came From your domain, but it was delivered to the receiving service by Groups.io's outbound server, not yours. (And it carries Groups.io's DKIM signature, not your domain's). This would only become a concern were you to change your DMARC policy from "none" to either "quarantine" or "reject". But Groups.io has a work-around for that. If you receive individual messages by email you may notice that some of your fellow members' emails have munged From addresses. Those members using AOL.com and yahoo.com for example. Shal -- Help: /static/help More Help: /g/GroupManagersForum/wiki Even More Help: Search button at the top of Messages list |
Shal Farley