[dmarc-discuss] submission via google / dmarc fail

A. Schulze sca at andreasschulze.de
Fri Apr 29 02:15:06 PDT 2016

A. Schulze via dmarc-discuss:

I like to point to that open topic without any answer I hoped to get  
from Google

simple setup:

gmail user send with RFC5322.From *@googlemail.com via google using a  
the user authenticate as *@gmail.com for submission.

dkim signing domain: header.d=gmail.com
spf: gmail.com
dmarc policy for googlemail.com: quarantine

result: dmarc fail.

  - should gmail users no longer use RFC5322.From *@googlemail.com?
  - should gmail users using RFC5322.From *@googlemail.com also  
authenticate the submission as *@googlemail.com?
  - or is it simply an issue that such messages are not handled  
correctly at google?

Any clarification is welcome.


> Hello,
> last days I wrote to a address <user at gmail.com>
> The answer was quarantained as the dmarc check failed.
> This ist the reply I receved:
>   Authentication-Results: mail.example.org; dmarc=fail  
> header.from=googlemail.com
>   Authentication-Results: mail.example.org;
> 	dkim=pass (2048-bit key; unprotected) header.d=gmail.com  
> header.i=@gmail.com header.b=gG3f0joi
>   Authentication-Results: mail.example.org; spf=pass  
> smtp.mailfrom=<firstname.lastname at gmail.com>  
> smtp.helo=mail-wi0-x234.google.com
>   ...
>   Received: from [...] (users.submission.client. [public.ip])
>         by smtp.googlemail.com with ESMTPSA id  
> e8sm15252097wiz.0.2015.
>         for <$me>
>         (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>         Sun, 16 Aug 2015 23:40:46 -0700 (PDT)
>   Sender: User <firstname.lastname at gmail.com>
>   From: User <firstname.middlename.lastname at googlemail.com>
>   X-Google-Original-From: User <firstname.middlename.lastname at gmail.com>
>   Message-ID: <55D181EE.80000 at gmail.com>
>   User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0)  
> Gecko/20100101 Icedove/31.7.0
>   To: ... $me
>   ...
> So Sender and X-Google-Original-From are "@gmail.com", but From is  
> "@googlemail.com"
> No idea if the user did something wrong or only hit a common pitfall.
> Looks like this user may mix two similar addresses with different  
> domainparts while using them as RFC5322.From or SMTP-Auth Username.
> Maybe the google people could clarify?
> Thanks,
> Andreas

More information about the dmarc-discuss mailing list