How to interpret DMARC reports

Discussion in 'Server Operation' started by Poliman, Oct 22, 2018.

  1. Poliman

    Poliman Member

    Hi. I have few DMARC reports, which I got using (temporary) settings:
    Code:
    v=DMARC1; p=none; rua=mailto:[email protected]
    The reports look like below:
    Code:
    <?xml version="1.0" encoding="UTF-8" ?>
    <feedback>
      <report_metadata>
        <org_name>google.com</org_name>
        <email>[email protected]</email>
        <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
        <report_id>12721403013628555816</report_id>
        <date_range>
          <begin>1539907200</begin>
          <end>1539993599</end>
        </date_range>
      </report_metadata>
      <policy_published>
        <domain>bama24.pl</domain>
        <adkim>r</adkim>
        <aspf>r</aspf>
        <p>none</p>
        <sp>none</sp>
        <pct>100</pct>
      </policy_published>
      <record>
        <row>
          <source_ip>54.38.202.128</source_ip>
          <count>70</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>pass</dkim>
            <spf>pass</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>bama24.pl</header_from>
        </identifiers>
        <auth_results>
          <dkim>
            <domain>bama24.pl</domain>
            <result>pass</result>
            <selector>default</selector>
          </dkim>
          <spf>
            <domain>bama24.pl</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
    </feedback>
    
    Code:
    <?xml version="1.0" encoding="UTF-8" ?>
    <feedback>
      <report_metadata>
        <org_name>google.com</org_name>
        <email>[email protected]</email>
        <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
        <report_id>17364130458748366543</report_id>
        <date_range>
          <begin>1539820800</begin>
          <end>1539907199</end>
        </date_range>
      </report_metadata>
      <policy_published>
        <domain>bama24.pl</domain>
        <adkim>r</adkim>
        <aspf>r</aspf>
        <p>none</p>
        <sp>none</sp>
        <pct>100</pct>
      </policy_published>
      <record>
        <row>
          <source_ip>91.227.122.10</source_ip>
          <count>1</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>fail</dkim>
            <spf>fail</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>bama24.pl</header_from>
        </identifiers>
        <auth_results>
          <dkim>
            <domain>k1.unixstorm.org</domain>
            <result>fail</result>
            <selector>x</selector>
          </dkim>
          <spf>
            <domain>k1.unixstorm.org</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
      <record>
        <row>
          <source_ip>193.222.135.142</source_ip>
          <count>1</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>pass</dkim>
            <spf>fail</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>bama24.pl</header_from>
        </identifiers>
        <auth_results>
          <dkim>
            <domain>bama24.pl</domain>
            <result>pass</result>
            <selector>default</selector>
          </dkim>
          <spf>
            <domain>o2.pl</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
      <record>
        <row>
          <source_ip>54.38.202.128</source_ip>
          <count>71</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>pass</dkim>
            <spf>pass</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>bama24.pl</header_from>
        </identifiers>
        <auth_results>
          <dkim>
            <domain>bama24.pl</domain>
            <result>pass</result>
            <selector>default</selector>
          </dkim>
          <spf>
            <domain>bama24.pl</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
    </feedback>
    
     

Share This Page