Skip to main content
Sign in
Deutsch Español Français Italiano

By Results

Results

The results section under DMARC Report gives you the ability to identify and focus your attention on specific result patterns that are probably worth looking into.

The first section after filters gives you an overview of messages disposition by receivers: Rejects, Quarantined, and Pass (accepted) as well as the total number of messages reported in the selected period (volume). 

The chart shows you the volumes by disposition and, if present, indicators about DNS records change (DKIM, SPF, and DMARC records). The details list displays the following information:

  • Last event: Date of the last event with this results
  • Source IP: source IP address (if single) of the messages
  • DKIM: DKIM alignment result, it passes if the DKIM signature domain is aligned (relaxed/strictly) to the Header FROM domain
  • SPF: SPF alignment result, it passes if the SPF domain is aligned (relaxed/strictly) to Header FROM domain
  • ARC: if present, the result of Authenticated Received Chain control
  • Disposition: the final decision made by the receiver about the messages
  • Override reason: if present, the reason type your policy was not honored
  • Selector: if present, the DKIM signature selector found on the message
  • Reporter: the receiver who reported the messages
  • Messages: the number of messages with this results

By selecting one result a detailed view is displayed

Result View

The resulting view gives you more information about the selected result

The first section is a summary of the selected result with its attributes about SPF and DKIM alignment results, ARC Results (if present), and the final decision made by the receiver (disposition). The map highlight from where the emails are originating and how many messages are from each country. 

The distribution of messages by sources, DKIM selectors found, and receivers who reported the messages. Overing on each chart section shows you the absolute value. The detailed table gives you the following information:

  • Source PTR/Server: the actual server IP and address from where the messages came from
  • Messages: the number of messages with these attributes
  • Selector: the DKIM signature identifier found
  • Reporter: the organization that reported the message
  • Last Event: the date of the last event reported with these attributes. By clicking on the date value you'll be redirected to the result on the detail page

Result detail

The last section of the DMARC report analysis gives you the specific situation explained in detail.  

First a quick overview of the main attributes of the situation:

  • SPF Result: the result of SPF-related DMARC check (SPF alignment)
  • DKIM Result: the result of DKIM-related DMARC check (DKIM alignment)
  • Forward: if the message is identified as forwarded
  • Compliance: the DMARC compliance result
  • Disposition: the final decision made by the receiver, eventually honoring your published policy:
    • Pass: Message accepted
    • Quarantine: Message marked as quarantine
    • Reject: Message rejected

What happened

In this section the final situation is explained in plain words: identifying the situation, explaining the DMARC check result, and, if this is the case, giving the user a possible solution to fix issues. Then all the information is displayed in more detail:

  • Disposition: with eventually a reason if your published policy has not been honored and has been overridden
  • DMARC Policy Published: the published policy at the time of the event
  • Reporter (receiver): Information about the report where this event has been reported
  • Sender: information about the send, origin server, and number of messages of the same kind
  • SPF Domain: domain used in the HELO command at the SMTP connection stage
  • Header FROM: domain shown to the user when a message is displayed in an email client
  • SPF Result: SPF checks the result and its alignment with the header FROM the domain
  • Envelope From/To: if supplied by the reporter (receiver) the additional header fields about the envelope of the message
  • DKIM Signature: list of all signatures found in the message
    • DKIM domain: domain of the signature
    • DKIM selector: selector (identifier) of the signature
    • DKIM Valid: the result of DKIM checks of the signature
    • DKIM Alignment: if the domain is aligned with header FROM domain

The show raw report button gives you the ability to see the actual XML report received where this particular situation has been reported among others.

Related articles