DKIM alignment in DMARC Management

[gavinb]

Hi,

I’m using the Cloudflare DMARC Management tool and for one of the valid sources I’m seeing 100% DMARC passed, 100% SPF aligned but only 96% DKIM aligned. The reporter is Google.

Is it possible to get more details using the DMARC Management tool to try to debug the issue?

If not, what’s the best option for debugging the issue?

Thanks.

[DarkDeviL]

@gavinb

If not, what’s the best option for debugging the issue?

The DMARC tool should be able to give you glance at which source (e.g. if it is messages you send from Google, or wherever) that is failing the alignment.

You can obviously not change the state of a previously sent message, - however:

In the above example, if Google is the source, where the messages are not 100% aligned, and you are sure that it is a legitimate message from you, you would then need to work together with Google, in order to find a way to get the remaining messages properly aligned, going forward.

I’m wondering, … for the ones that aren’t aligned, … were they actually sent by a source that you recognize?

[gavinb]

The source is my domain’s mail server and the reporter is Google.

What I’m asking is is there some way to drill down to get more detail about exactly why the DKIM alignment failed 4% of the time for this source?

Can I find out the details of the specific emails that caused the issue?

I’m assuming there’s some sort of configuration issue but I’m not sure why given 96% of the emails are fine.

The DMARC Management tool appears to just give me a high-level summary.