I'm trying to enable DMARC.

The problem that I see is that since I use 3rd party companies for marketing emails, DMARC SPF fails for those emails because they put email from their own domain into return path (i.e. bounce email address).

This is what I see in the report:


I.e. auth_results are fine, but policy_evaluated fails.

So the question is:

Is there any way to check only for DKIM in the DMARC policy?

Thanks, Best regards, Roman

  • If you send mail via a third party, then your SPF record needs to be changed to reflect this. Oct 1, 2016 at 19:33
  • Yes, of course. I've changed SPF record accordingly - that's why auth_results for SPF is "pass". But DMARC policy evaluation shows it as "fail" because return-path address doesn't match my domain. I.e. 3rd party company uses it's own email addresses for return-path. But apparently DMARC only needs SPF OR DKIM to be "pass". And since DKIM evaluation is "pass", whole DMARC result is "pass". That's what I wanted to confirm.
    – Roman_T
    Oct 3, 2016 at 13:38

1 Answer 1


What that says is that the <disposition>none</disposition> means it's not rejecting the email based on your DMARC Policy. According to DMARC either your ASPF or ADKIM must pass, in your case the ADKIM passes. So it doesn't take a Reject action against the email, if it said <disposition>reject</disposition> then you have reason to be concerned. There are email testers that will evaluate your ASPF and ADKIM, but you don't have to, because this is a perfectly normal scenario and nothing for you to worry about.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .