
Why? The message is signed by the outbound email server for with a DKIM domain (d=) of ( highlighted above) and a DKIM selector (s=) of “brisbane” ( highlighted above). KVdkLLkpVaVVQPzeRDI009SO2Il5Lu7rDNH6mZckBdrIx0orEtZV Enter your domain in the Check MX page.DKIM-Signature: v=1 a=rsa-sha256 s=brisbane d= Ĭ=simple/simple q=dns/txt : From : To : Subject : Date : Message-ID īh=2jUSOH9NhtVGCQWNr9BrIAPreKQjO6Sn7XIkfJVOzv8= ī=AuUoFEfDxTDkHlLXSZEpZj79LICEps6eda7W3deTVFOk4yAUoqOBĤnujc7YopdG5dWLSdNg6xNAZpOPr+kHxt1IrE+NahM6L/LbvaHut

Verify your DMARC record with the Google Admin Toolbox. There's a problem with your DMARC SPF record. Verify the authentication method (SPF or DKIM) is aligned with the header From: address. Verify that the message passes either SPF or DKIM checks. The message fails other authentication checks. This helps you understand if it’s just one message from one source, or if multiple sources are affected Enter your domain in the Check MX page.Ĭheck if messages sent from other allowed sources in your domain are also failing DMARC. Verify your SPF record with the Google Admin Toolbox. There's a problem with your DNS SPF record. Enter your domain in the Check MX page, then check Effective SPF Address Ranges. Get a list of all IP addresses and domains in your SPF record with the Google Admin Toolbox. Messages sent from servers not in your SPF record can fail authentication. The message was sent by a server that's not in your SPF record.Ĭheck your SPF record to make sure it includes all IP addresses and domains that are allowed to send mail for your domain. This helps you understand if it’s just one message from one source, or if multiple sources are affected. For messages sent from Google Workspace, this should be the key you set up for DKIM.įor messages sent by a third-party service, check the third-party documentation for steps to verify the DKIM key.Ĭheck if messages sent from other allowed sources in your domain are also failing SPF. Verify the DKIM key is published with the Google Admin Toolbox. There's a problem with your DNS DKIM record. Ask the administrator of the server to not modify messages, which can cause DKIM to fail. The message was modified during transit or after the DKIM signature was added to the message.įind out if the message was routed through another server, where it might have been modified. Recommended troubleshooting stepsĬheck if messages sent from other allowed sources in your domain are also failing DKIM. Then review Email Log Search result details to read Message details, Post-delivery message details, and Recipient details. Search for a specific message using the Sender IP address. Get more information with Email Log Searchįor messages sent through Google Workspace, find out more information about a specific message in Email Log Search. Make sure you're following the recommended guidelines for sending mail to Gmail users, especially if you send a lot of mail. If your DMARC policy has enforcement set to none and messages are sent to spam, the cause might be something other than your DMARC record. To verify that messages pass all three authentication checks: SPF, DKIM, and DMARC, check your DMARC reports or DMARC report analysis from your third-party service. Verify messages pass all three authentication checks: SPF, DKIM, and DMARC.

Check the headers in a message sent from your domain.To check if messages from your domain are passing authentication checks: Check message headersĮmail message headers contain the results for SPF, DKIM, and DMARC authentication checks. If you don't set up SPF and DKIM before enabling DMARC, messages sent from your domain will probably have delivery issues. Read detailed steps in Help prevent spoofing, phishing & spam.

SPF and DKIM should be enabled for at least 48 hours before enabling DMARC. Make sure you've enabled SPF and DKIM for your domain. Verify messages pass authentication Make sure SPF and DKIM are enabled for your domain If your DMARC record seems to be correctly configured, continue to the troubleshooting methods in this article. Follow the troubleshooting steps in this article if messages from your domain are:įirst, verify your DMARC configuration.
