Forum Discussion
Some outlook email accounts fail dkim but not others - NOT 365
4/10/24
Hi Beau,
Thanks a lot for the time you shared with me today on our remote session, please find the below summary for our case:
- MS support collected three samples for the quarantined emails from https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fMSN.com&c=E,1,26Z38nDaJbluOGexCOeY3xawxZmEwp9lerUGgtZai3xCzGJaDfSci2yqpGc1pT5DCP81tGu1x1aowE4r__30PYmYxjRD_KyRhXCTZZL8ofU,&typo=1&ancr_add=1 for analysis
- I Analyzed the message header for few samples ( attached) and found the below :
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2ftools.ietf.org%2fhtml%2frfc8601&c=E,1,8MKA9Gd52D-0c6QJu9iJDphPg7COxCCjjV5GgYtKvt_XJtVXu_mKxjZlv0nLvpqzov2YF5GAnqYoI1JTwHFSbc-6dz_B5duu2BxQS0h7Gdi3tW9P6g,,&typo=1
mx-inbound9-12.us-east-2a.ess.xxx.com; spf=pass (sender IP is 40.92.23.95) mailto:smtp.mailfrom=email address removed for privacy reasons; dkim=fail (No key [DKIM DNS record not found]) header.d=msn.com; dmarc=none action= mailto:header.from=email address removed for privacy reasons
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2ftools.ietf.org%2fhtml%2frfc6376&c=E,1,ylpkv0fIKXetSvejwdnPL8o4nsRSxSazz9QPjS550I67H5C5gyrHOx217QlJErtRohN99cDDuGruzuRCjaUog4WEMXiGUfo2VeXulihRULA2lydMItlzA5PVKA,,&typo=1
v=1; a=rsa-sha256; c=relaxed/relaxed; d=msn.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Yz+xBG0EUYcMykZq9MM6krZkbxy35i9hCfQSgRZEtD4=;
b=Un8Sr/YNzNmZfFpqg2AHCkpKzN3O+WFQur+/bQb8evpmCUVS4j34WRUWZTbbVIGe68Xy/QOEVPifvpJvG8qgUa/SDrXl/BUCFMfTbwV5sHEYLVcF1TBEZ6B5S5y+IWOYCoQr+k7wAYi7PXTKGVhTVnknbO3Mon+CBSlyD4spIBvoWbyxd6Nhg6VfVvRpNQPWlz+coD/lq5/3Dq2AwTghG/3PmjClXJFft6j1e/0Tq/zQNHr2Rr2b+Qc11KSZ93nyl+05fimowFFPe5IET8976IIJKe2STUuxIPB9QBUYWa8F4U2NPL2Rc6LCnVLPB1I5v4SRMPlzybxInhsQqRYm0A==
- Checked the DKIM record for MSN on https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fdmarcian.com%2fdkim-inspector%2f&c=E,1,3xtvWZyhXVzJpNypB1GsBRYa10J00sQGfYpZJPOyPaYb6AbF9zjt_ZwE_xZzDTR63IRh-70Dc-ZA5gJeUrQjQ3TWmMgVHWMq4At9Px8AYTFaaSg,&typo=1 and found it is missing (Query: selector1._domainkey.msn.com).
- I Escalated the issue to PG team with high severity
- We agreed to change the Sev to B.
Thanks and best regards.