What is the name of the domain?
What is the issue you’re encountering
seeing large number of DMARC failures for emails reported by Google.com
Apologies this post didn’t quite go to plan.
What i’m seeing is large numbers of DMARC failures in the reports from google in what look to be forwarded emails.
Here is an example aggregate report
record>
<source_ip>209.85.220.97</source_ip>
105
<policy_evaluated>
none
fail
fail
</policy_evaluated>
<header_from>mycompanydomain.co.uk</header_from>
<auth_results>
mycompanydomain.co.uk
fail
mydkim1
customerdomain.co.uk
pass
</auth_results>
The source appears to be a Google IP so i’m guessing that these 105 emails are being forwarded however they’ve been signed by my DKIM so my understanding was that they should carry the DKIM and be permitted.
Is it failing because the envelope is different and showing as the customer domain?
Also the below example shows large numbers of emails failing from one google IP and successful from another. both are my domain for the “from:domain” and the same customer in the “envelop from:domain”. why in this instance does one show DKIM aligned and the other does not?
