Loading

DMARC Support in Account Engagement

Date de publication: Mar 27, 2025
Description
Disclaimer: Account Engagement cannot supply DMARC authentication - we recommend working with an outside vendor to configure your policy.

DMARC, which stands for “Domain-based Message Authentication, Reporting & Conformance”, is an email authentication protocol. It builds on the widely deployed SPF and DKIM protocols, adding a reporting function that allows senders and receivers to protect and monitor fraudulent use of a domain in email. DMARC allows domain owners, including ISPs and webmail providers, to publish a “policy” that can have restrictions on where their domain can be utilized.
Résolution
A DMARC test checks for:
  1. domain alignment for DKIM - alignment between the From domain (or From header) and the DKIM signing domain (the d= tag)
  2. domain alignment for SPF - alignment between the From domain (or From header) and the return-path (aka MAIL FROM/Envelope From/bounce address) domain.
In order to pass an overall DMARC test, only one of the options is required, not both.
 
Account Engagement passes an overall DMARC test because Account Engagement has been set up to sign DKIM with the your email sending domain (option 1 above). As long as DKIM is configured for the email sending domain, DMARC should pass.
 
Account Engagement emails will fail the SPF alignment check because the visible From header and the return-path address domains won't be aligned on emails sent through Account Engagement.
  • The return-path address for Account Engagement emails will have a domain that looks like bounce.s7.exacttarget.com or bounce.s10.mc.pd25.com.
  • Your visible mail from address will be your own email sending domain, such as marketing@mycompany.com.
If your company requires configuration for aligning the return-path address to the From header (SPF Alignment), log an Account Engagement Support case to request a custom return path. We will work with our Deliverability Team to supply the DNS records to add to your domain DNS settings. We do not assist with configuring these records on your DNS. Please note that there can only be one custom return-path header domain setting per business unit and it is not variable. 

NOTES:
  • This configuration only provides SPF domain alignment, which can strengthen an existing DMARC policy. Account Engagement does not capture or report on DMARC failure notifications. We recommend that you partner with a vendor that provides DMARC monitoring and reporting, such as Proofpoint or Agari.
  • Do not use the exact same domain for your email sending domain and your tracker domain. For example, if your tracker domain is go.company.com, your email sending domain cannot also be go.company.com. Using identical domains for both features will likely result in authentication errors and deliverability issues. 
Numéro d’article de la base de connaissances

000381338

 
Chargement
Salesforce Help | Article