SOLVED
Home

Does Microsoft comply with the Reporting specification of DMARC RFC7489?

%3CLINGO-SUB%20id%3D%22lingo-sub-251667%22%20slang%3D%22en-US%22%3EDoes%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-251667%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20wondering%20specifically%20about%20sections%207.2%20(aggregate%20reports)%3CSPAN%3E%20and%207.3%20(Failure%20Reports).%20I%20have%20never%20received%20either%20at%20my%20RUA%2FRUF%20specified%20address%20from%20Microsoft%2C%20but%20I%20get%20them%20from%20all%20other%20major%20cloud%20mail%20providers.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-251667%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267266%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267266%22%20slang%3D%22en-US%22%3EPut%20in%203%20votes%20on%20it.%20I'll%20spread%20it%20on%20Twitter%20as%20well.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267265%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267265%22%20slang%3D%22en-US%22%3EI%20was%20not%20aware%20of%20this%2C%20thank%20you%20for%20bringing%20this%20up.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267214%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267214%22%20slang%3D%22en-US%22%3E%3CP%3EUpvote!%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Foffice365.uservoice.com%2Fforums%2F264636-general%2Fsuggestions%2F11094318-dmarc-aggregate-reports-from-o365-domains%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365.uservoice.com%2Fforums%2F264636-general%2Fsuggestions%2F11094318-dmarc-aggregate-reports-from-o365-domains%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267211%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267211%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F126458%22%20target%3D%22_blank%22%3E%40Ben%20Bos%3C%2FA%3E%3C%2FP%3E%3CP%3EThanks%20for%20the%20links%20Sir.%20I%20will%20give%20them%20a%20read.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267014%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267014%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft%20doesn't%20send%20DMarc%20reports%2C%20and%20it's%20not%20on%20the%20roadmap.%3C%2FP%3E%3CP%3ESome%20more%20information%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Ftzink%2F2017%2F10%2F21%2Fhow-we-got-to-enforce-dmarc-for-sub-domains-of-microsofts-largest-consumer-email-brands%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.msdn.microsoft.com%2Ftzink%2F2017%2F10%2F21%2Fhow-we-got-to-enforce-%3CSPAN%20class%3D%22highlight%22%3Edmarc%3C%2FSPAN%3E-for-sub-domains-of-microsofts-largest-consumer-email-brands%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_security-mso_o365b%2Fdmarc-reporting-when-office-365-is-sitting-behind%2Fb704db5d-451e-4157-833d-88664ed39d9b%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fmsoffice_o365admin-mso_security-mso_o365b%2F%3CSPAN%20class%3D%22highlight%22%3Edmarc%3C%2FSPAN%3E-reporting-when-office-365-is-sitting-behind%2Fb704db5d-451e-4157-833d-88664ed39d9b%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266491%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266491%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F211953%22%20target%3D%22_blank%22%3E%40Roberth%20Strand%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20a%20yes%20and%20no%20question.%20For%20one%20of%20the%20domains%2C%20we%20send%20to%20the%20same%20domain.%20For%20the%20other%2067%20we%20own%2C%20we%20send%20to%20the%20original%20domain%20also.%20Each%20of%20the%20domains%20does%20have%20an%20authorization%20record%20entry%20in%20the%20original%20domains%20DNS%20records.%20I%20will%20pm%20you%20the%20Domain%20Name%20and%20you%20can%20query%20the%20dmarc%20record%20via%20MXToolbox%20if%20you%20would%20like%20to%20inspect%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266487%22%20slang%3D%22en-US%22%3ERe%3A%20Does%20Microsoft%20comply%20with%20the%20Reporting%20specification%20of%20DMARC%20RFC7489%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266487%22%20slang%3D%22en-US%22%3EAre%20you%20sending%20the%20reports%20to%20a%20different%20domain%3F%20If%20not%2C%20I%20would%20love%20to%20take%20a%20look%20at%20the%20dmarc-record%20you've%20set.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20are%20sending%20a%20report%20to%20a%20different%20domain%2C%20you%20would%20need%20to%20add%20an%20authorization%20record.%20Take%20a%20look%20at%20this%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdmarc.org%2F2015%2F08%2Freceiving-dmarc-reports-outside-your-domain%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdmarc.org%2F2015%2F08%2Freceiving-dmarc-reports-outside-your-domain%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Robert Woods
Super Contributor

I am wondering specifically about sections 7.2 (aggregate reports) and 7.3 (Failure Reports). I have never received either at my RUA/RUF specified address from Microsoft, but I get them from all other major cloud mail providers. 

 

 

 

7 Replies
Are you sending the reports to a different domain? If not, I would love to take a look at the dmarc-record you've set.

If you are sending a report to a different domain, you would need to add an authorization record. Take a look at this:
https://dmarc.org/2015/08/receiving-dmarc-reports-outside-your-domain/

@Roberth Strand

 

This is a yes and no question. For one of the domains, we send to the same domain. For the other 67 we own, we send to the original domain also. Each of the domains does have an authorization record entry in the original domains DNS records. I will pm you the Domain Name and you can query the dmarc record via MXToolbox if you would like to inspect it.

Solution

@Ben Bos

Thanks for the links Sir. I will give them a read. 

I was not aware of this, thank you for bringing this up.
Put in 3 votes on it. I'll spread it on Twitter as well.
Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Why doesn't O365 produce DMARC reporting?
Scott Brown in Microsoft 365 on
10 Replies
Migrated to O365. Emails going to GMAIL Spam.
Griffe Youngleson in Office 365 on
9 Replies
Teams error code - 6
damnit95 in Office 365 on
4 Replies
When this insider extension going to be available?
HotCakeX in Discussions on
2 Replies