Clients emails either not being delivered or going to spam.

[thecomputerguy]

Client contacted me because one of their vendors was not receiving their email. This client is not on MSP so this is a one off. Email is at Google Workspace.

• He is able to email my gmail account without issue
• He setup an email account using his domain for me and gave me admin
• I discovered SPF was OK, DKIM Missing, DMARC Missing
• Generated and added DKIM & DMARC records to DNS
• I sent myself a test message from my new account to my Gmail, no problem
• Original issue was resolved and now they are able to sent the emails they couldn't before

Now their are reports that they have having issues sending emails to OTHER vendors

• Domain is valid and up to date
• MX is OK

DKIM/DMARC/DNS Report:






Domain/Email passes a blacklist check from multiple sites including MX Toolbox.

Anything else to check?

 

[YeOldeStonecat]

How long ago did you change/create those DNS records?
May just have to allow time to settle in, replicate, etc. Spam filters see a "change" and..may question things more.

May want to adjust the DMARC to p=none just for a few weeks....assuming you did p=reject or p=quarantine

 

[thecomputerguy]

How long ago did you change/create those DNS records?
May just have to allow time to settle in, replicate, etc. Spam filters see a "change" and..may question things more.

May want to adjust the DMARC to p=none just for a few weeks....assuming you did p=reject or p=quarantine

I made the changes Tuesday .... and ... it's Friday.

The DMARC record is set to

Value v=DMARC1; p=quarantine;

I can change it to none but ... I thought the DMARC record was for incoming not outgoing.

 

[YeOldeStonecat]

I made the changes Tuesday .... and ... it's Friday.

The DMARC record is set to


I can change it to none but ... I thought the DMARC record was for incoming not outgoing.

OK so that should be more than enough time.

And...quarantine would not NDR. Well, is he getting NDRs? Or...he just sends..and...client doesn't receive...but don't know where it's ending up like junk or quarantine.

Yes DMARC tells the recipients spam filter system what to do with email that fails SPF/DKIM. So it is for incoming side. I saw you type that he's having problems sending to others now...but assumed that meant recipients just aren't receiving.

 

[thecomputerguy]

OK so that should be more than enough time.

And...quarantine would not NDR. Well, is he getting NDRs? Or...he just sends..and...client doesn't receive...but don't know where it's ending up like junk or quarantine.

Yes DMARC tells the recipients spam filter system what to do with email that fails SPF/DKIM. So it is for incoming side. I saw you type that he's having problems sending to others now...but assumed that meant recipients just aren't receiving.

He's not receiving NDR's and the recipient is just "not getting them" not sure the details of that.

I will loosen the DMARC to none for now.

 

[Sky-Knight]

No DKIM, no DMARC, and domain reputation is completely crap. This can take weeks to resolve. You've sorted that! Still, the specific recipient needs to tell you "why" they're "simply gone".

All you can do is run the report to show the mail being delivered to the destination mail service. After that, it's out of your hands.

 

[callthatgirl]

@thecomputerguy I do none now too, the quaratine didn't work as well.

did you check the vendors dns?

I have found issues with some using proofpoint. That nameserver looks like GoDaddy, so that would figure they mucked it up.