Invoice Emails From The Shop Goes Straight To Junk. Customers Think We Ghosted Them

Solveddkimdmarcemailspf16 replies · 291 views · started
Accepted solution by Theo Fischer — lol same thing happened to me first, look at what the receiver actually saw, in Gmail use "Show original", in Outlook view message source…
  1. we just realized that invoice emails from teh shop has been landing in spam for who knows how long. A customer on Outlook.com mentioned it casually and my stomach dropped.

    I went into our DNS and there is an SPF record, and I think DKIM was set up when we signed up for the service. Honestly I dont know how to check whether any of it actually works. Where do I start without breaking our email completely??

    1
  2. ok but which services send email using your domain, all of them? ??

    11 6 helpful
  3. hmmm have u checked your outlook.com settings? mine were reset after an update good luck man!

    1 2 helpful
  4. ok so the contact form sends From the visitors own address. i had no idea that was a problem. sorry for the wall of text lol

    facepalm

    1 0 helpful
  5. contact forms that send mail From the visitors address are spoofing that persons domain and will fail everywhere. send from your own address (like noreply@yourdomain) and put the visitor's address in Reply-To.

    8 0 helpful
  6. been there man start DMARC with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to collect reports without affceting delivery. Read the reports for a couple of weeks to see every source sending as ur domain, fix them, then move to quarantine. u can also sign up for Google Postmaster Tools to see ur domain reputation at Gmail. worked for me anyway 🤷

    1 5 helpful
  7. respectfully disagree, i tried that and it made dkim worse but hey ymmv

    0 4 helpful
  8. DKIM is per sending service... every tool that sends as your domain (mailbox provider, newsletter tool, shop platform) needs its own DKIM key published, usually as a TXT or CNAME record at selector._domainkey.yourdomain. When you switch tools, the new one needs its own record. hope that helps :)

    2 2 helpful
  9. page 1 lets gooo.. 👍 wait does this also apply to emails?

    10 5 helpful
  10. @erik.larsen92 did u ever fix it? ?

    2 0 helpful
  11. been there man DMARC cares about alignment: the domain in teh visible From address has to match the DKIM d= domain or teh SPF envelope domain. A service that signs with its own domain will pass DKIM but fail DMARC. Turn on custom domain authentication in that service. good luck man!

    5 0 helpful
  12. A domain must have only one SPF record. two v=spf1 TXT records make SPF return a permanent error. merge them into one, for example v=spf1 include:_spf.provider-a.example include:provider-b.example ~all, and keep total DNS lookups at 10 or fewer.

    0 4 helpful
  13. Accepted solution

    lol same thing happened to me first, look at what the receiver actually saw, in Gmail use "Show original", in Outlook view message source 🤦 look for spf=pass, dkim=pass and dmarc=pass in teh Authentication-Results header. anything that says fail or none tells you exactly which piece to fix.

    2 3 helpful
  14. not gonna lie this is driving me nuts told my boss it would take 10 minutes... its been a whole week im about to throw this thing out the window lol

    1 0 helpful
  15. @theo_cipher dude changed the contact form to send from our own adrdess with Reply-To set to the visitor... no more spam fodler... such a simple fix. cant believe it was that simple lol

    4 0 helpful

Reply to this topic

Sign in or create an account to reply.