An user had sent an email to gmail ID and got a report of dmarc failed. Not really sure why this happened (dmarc failed). This is not happening to all the emails which have sent to gmail. Randomly we are seeing such. Has anyone come across such behavior? Any notable issues on this?
Hi Bharath,
If I may ask, are you using a 3rd party sender to send the emails? If that is the case, it is possible that they have a misconfigured SPF record or incorrectly DKIM signing emails.
It is taking the IP address of gmail as sender IP address. Sender IP address should have been the company exchange address.
Interesting. Is it a forwarded email?
no, not a forwarded one.
any detail you can provide about the message, or was it just a standard email?
Received-SPF: pass (mx123[.]antispamcloud[.]com: domain of gmail.com designates 209.85.166.171 as permitted sender) client-ip=209.85.166.171; envelope-from=mickeybyte+caf_=michielpeene=nhv.be[@]gmail.com; helo=mail-il1-f171.google.com;
X-SPF-Result: mx123.antispamcloud.com: domain of gmail[.]com designates 209.85.166.171 as permitted sender
X-DKIM-Status: none
From the above info, we can see that sender IP address is of mx.google.com and not of my company IP address.