Jim,
DMARC is a combination of DKIM and SPF. The root cause of this failure is SPF.
The SPF record for rts.kijiji.ca returns the following:
v=spf1 mx a a:rtsmail.kijiji.ca a:rtsmailix5.kijiji.ca a:rtsmailesh.kijiji.ca ip4:195.78.85.112/28 ip4:91.195.49.144/28 ip4:195.78.84.62 include:spf.ecgmail.cloud include:mailgun.org ~all
Any IP address not mentioned in the above SPF will be rejected. Now consider the following message flow:
- You receive a message from someone@rts.kijiji.ca, and you have a rule to forward this message to your.account@gmail.com
- When the message is forwarded, the sender's address remains someone@rts.kijiji.ca
- Google's SMTP server sees a message coming in for rts.kijiji.ca but from an IP that is not authorized to send and, therefore, puts it in the junk folder.
- Forwarding it manually works because the sender is no longer someone@rts.kijiji.ca, but your email.
Using Xeams to solve this problem
- Xeams has a feature called Distribution List (DL).
- Although this feature is meant to expand a single email to multiple recipients, you can use it to your advantage using the following steps.
- Create a new DL with the following values: List Address should be your.email@yourcompany.com, and the Forward To field should have your.account@gmail.com
- When Xeams forwards the message to Gmail, it will automatically change the MAIL FROM value in SMTP envelope to yourcompany.com
- Therefore, when Google gets the message it will look at the SPF record for yourcompany.com rather than rts.kijiji.ca, and the message won't be considered spoofed.