Copilot for Microsoft 365 Tech Accelerator
Feb 28 2024 07:00 AM - Feb 29 2024 10:30 AM (PST)
Microsoft Tech Community
SOLVED

emails are getting Held because the DMARC Result Fails

Copper Contributor

One of our colleagues OOF message, does not arrive at recipient - the recipients IT department writes the following:

 

"The email was released but Permitting/Whitelisting the sender mwn@operate.dk won’t help from our end as the emails are getting Held because the DMARC Result Fails as shown below as their email records are not possibly correct.

 

This needs to be checked with the sender’s Messaging team so that this can be rectified."

 

albeit my limited experience with O365 admin, I found the relevant message and its corresponding message events:

 

Allinilla_0-1622190091024.png

 

Can anyone point me in the right direction.

 

Much obliged and greetings from Denmark :) 

 

Allin 

 

    

1 Reply
best response confirmed by Allinilla (Copper Contributor)
Solution

@Allinilla So this sounds like DMARC/SPF/DKIM might not be set up properly.

 

operate.dk has a DMARC policy of quarantine (see _dmarc.operate.dk TXT record)

SPF record is "v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com include:cmail1.com include:spf.emailsignatures365.com -all"

 

DMARC requires SPF and DKIM to be valid so I can only assume that DKIM is not set up correctly as I see no reason why that SPF record would cause Out of Office replies from 365 to fail.

 

You will need whoever looks after the admin side of operate.dk 365 tenancy to configure DKIM as per How to use DKIM for email in your custom domain - Office 365 | Microsoft Docs

1 best response

Accepted Solutions
best response confirmed by Allinilla (Copper Contributor)
Solution

@Allinilla So this sounds like DMARC/SPF/DKIM might not be set up properly.

 

operate.dk has a DMARC policy of quarantine (see _dmarc.operate.dk TXT record)

SPF record is "v=spf1 include:spf.mailjet.com include:spf.protection.outlook.com include:cmail1.com include:spf.emailsignatures365.com -all"

 

DMARC requires SPF and DKIM to be valid so I can only assume that DKIM is not set up correctly as I see no reason why that SPF record would cause Out of Office replies from 365 to fail.

 

You will need whoever looks after the admin side of operate.dk 365 tenancy to configure DKIM as per How to use DKIM for email in your custom domain - Office 365 | Microsoft Docs

View solution in original post