Cannot verify a CNAME for freshservice

[rahim.moidin]

What is the name of the domain?

Homepage - ARRB Systems

What is the error number?

Error: ‎550 5.7.509

What is the error message?

Access denied, sending domain arrbsystemscom does not pass DMARC verification and has a DMARC policy of reject‎

What is the issue you’re encountering

1 of the 3 CNAMES are not validating

What steps have you taken to resolve the issue?

Upon verifying the DKIM records, we see the below output:

In case there is any propagation-related issue, such as not propagating to some regions, this needs to be checked with the customer’s DNS provider.

This is the record -

Host - fs3._domainkey.arrbsystemscom
Value - wl8001116s3.domainkey.freshemailio

All other records validate correctly.

What feature, service or problem is this related to?

DNS records

[sjr]

_domainkey is delegated to Azure nameservers so you need to either set the record there, or if you want to use a record in your Cloudflare DNS, remove the _domainkey NS records from your Cloudflare DNS…
https://cf.sjr.dev/tools/check?0dd66eed69a34fce9211e6f94ca3db8a#dns-mail