DMARC Jim
    DMARC Synametrics Support
        DMARC Jim
            DMARC Synametrics Support
                DMARC Jim
                    DMARC Synametrics Support

From: Jim
Date: 5/11/23 7:34 PM
Topic: DMARC
Type: General Discussions
Post a follow up

I want to remove the DMARC verification that is stopping certain emails from being auto forwarded.

I know that I can manually forward the messages, but certain DMARC settings are preventing some messages from being auto forwarded, making me sign into the account, defeating the purpose of auto forwarding.

 

Can I use XEAMS URL Sandbox to remove DMARK verification that prevents some emails from auto forwarding?

Top

From: Synametrics Support
Date: 5/11/23 8:27 PM
Topic: DMARC
Type: General Discussions
Post a follow up

Jim,

I am sure I understand your email correctly. Which emails are you forwarding? Could you please give me an example? I am providing an email below. Let me know if my understanding is correct.

Is this correct? If yes, are you using Xeams to forward the message or doing it from your Outlook?

Also, you cannot use URL Sandbox to remove DMARC signatures. DMARC is added to an email header, not its body. They are not URLs.

Top

From: Jim
Date: 5/12/23 11:16 AM
Topic: DMARC
Type: General Discussions
Post a follow up

Your sample message path is correct.

I get an email from b-j82n1mgrxfpxv@rts.kijiji.ca that has DMARK set so as to prevent auto forwarding.

Currently it is blocked from being forwarded via auto forwarding to another outlook account, but I can manually forward the message onward.

Is there a way to incorporate your service to forward the message that the original sender is trying to prevent forwarding on, to my main email address?

Top

From: Synametrics Support
Date: 5/12/23 11:45 AM
Topic: DMARC
Type: General Discussions
Post a follow up

Jim,

DMARC is a combination of DKIM and SPF. The root cause of this failure is SPF.

The SPF record for rts.kijiji.ca returns the following:

v=spf1 mx a a:rtsmail.kijiji.ca a:rtsmailix5.kijiji.ca a:rtsmailesh.kijiji.ca ip4:195.78.85.112/28 ip4:91.195.49.144/28 ip4:195.78.84.62 include:spf.ecgmail.cloud include:mailgun.org ~all

Any IP address not mentioned in the above SPF will be rejected. Now consider the following message flow:

  • You receive a message from someone@rts.kijiji.ca, and you have a rule to forward this message to your.account@gmail.com
  • When the message is forwarded, the sender's address remains someone@rts.kijiji.ca
  • Google's SMTP server sees a message coming in for rts.kijiji.ca but from an IP that is not authorized to send and, therefore, puts it in the junk folder.
  • Forwarding it manually works because the sender is no longer someone@rts.kijiji.ca, but your email.

Using Xeams to solve this problem

  • Xeams has a feature called Distribution List (DL).
  • Although this feature is meant to expand a single email to multiple recipients, you can use it to your advantage using the following steps.
    • Create a new DL with the following values: List Address should be your.email@yourcompany.com, and the Forward To field should have your.account@gmail.com
  • When Xeams forwards the message to Gmail, it will automatically change the MAIL FROM value in SMTP envelope to yourcompany.com
  • Therefore, when Google gets the message it will look at the SPF record for yourcompany.com rather than rts.kijiji.ca, and the message won't be considered spoofed.

 

Top

From: Jim
Date: 5/12/23 12:03 PM
Topic: DMARC
Type: General Discussions
Post a follow up

It seems that you are saying that my XEAMS account would have to be the original recipient.
My satellite outlook account is the one registered with the rts.kijiji.ca address.
It appears, by your explanation, that the XEAMS account would have to be the first recipient on the chain.
I am trying to receive the message from rts.kijiji.ca, at my satellite address that I have registered with rts.kijiji.ca, and then forward it to the XEAMS account and then onward to my base account.
Is there a workaround that does not involve me changing my relationship between rts.kijiji.ca and my satellite account?

Top

From: Synametrics Support
Date: 5/12/23 2:32 PM
Topic: DMARC
Type: General Discussions
Post a follow up

Jim,

I feel there is a disconnect between your use case and my understanding of the problem.

My previous answer was based on the following assumptions:

  • You own your domain. For example, my-domain.com and have an email address like jim@my-domain.com
  • You process incoming emails for @my-domain.com in Xeams
  • A message comes from someone@rts.kijiji.ca to jim@my-domain.com, and you want to forward that message to jim@gmail.com

Are these statements correct? If not, please correct my mistakes.

Xeams is an email server usually used by companies and individuals who own their domains. Do you own a domain, or do you have an email address on a domain provided by your ISP?

 

 

Top