• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Dmarc report suspicious

Davidtina94

New Pleskian
I've recieved a dmarc report from outlook with two records, the first one it's okay, but i got a second record that I can't understand, does any body knows what shoult it mean?
I share the record hidin the ip and domain.

<record>
<row>
<source_ip>xxx.xxx.xxx.xxx</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>quarantine</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
<identifiers>
<envelope_to>pco.com.mx</envelope_to>
<envelope_from>&lt;&gt;</envelope_from>
<header_from>mail.mydomain.com</header_from>
</identifiers>
<auth_results>
<spf>
<domain>mail.mydomain.com</domain>
<scope>helo</scope>
<result>none</result>
</spf>
</auth_results>
</record>

I don't know why the dkim is not passig if it always pass, the spf sometimes,
The first stranger thing is that the subdomain "mail". did not appears on any other record before, and the second is is that I got <envelope_from>&lt;&gt;</envelope_from>
Does any one could help me to undertand what does this record means?

Thank you for your help
 
Back
Top