xml 为什么我每天都会收到 DMARC 报告?

声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow 原文地址: http://stackoverflow.com/questions/30342550/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me): StackOverFlow

提示:将鼠标放在中文语句上可以显示对应的英文。显示中英文
时间:2020-09-06 12:08:40  来源:igfitidea点击:

Why do I receive a DMARC report everyday?

xmlemailgmaildmarc

提问by IvanS

I've setup DMARC policy on my domain. But every day I recieve an XML report from Google.

我已经在我的域上设置了 DMARC 策略。但是每天我都会收到来自 Google 的 XML 报告。

I don't understand what the problem is?

我不明白问题是什么?

The report is:

报告是:

<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
  <report_metadata>
    <org_name>google.com</org_name>
    <email>[email protected]</email>
    <extra_contact_info>http://support.google.com/a/bin/answer.py?answer=2466580</extra_contact_info>
    <report_id>7241837801886321635</report_id>
    <date_range>
      <begin>1431388800</begin>
      <end>1431475199</end>
    </date_range>
  </report_metadata>
  <policy_published>
    <domain>rigweb.ru</domain>
    <adkim>r</adkim>
    <aspf>r</aspf>
    <p>none</p>
    <sp>none</sp>
    <pct>100</pct>
  </policy_published>
  <record>
    <row>
      <source_ip>144.76.154.188</source_ip>
      <count>2</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>site.ru</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>rigweb.ru</domain>
        <result>pass</result>
      </dkim>
      <spf>
        <domain>site.ru</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
</feedback>

My DMARC Policy:

我的 DMARC 政策:

v=DMARC1; sp=none; aspf=r; p=none; rua=mailto: [email protected]

How can I solve the problem?

我该如何解决问题?

回答by Pierre Prinetti

In short: it's all good.

简而言之:一切都很好

Here's the explanation for this:

这是对此的解释:

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It is in fact a ruleset made for reportingback to you on the quality of the email messages received from your domain.

DMARC 代表基于域的消息身份验证、报告和一致性。它实际上是一个规则集,用于向您报告从您的域收到的电子邮件的质量。

You are receiving those XML reports because it's what you asked with the rua=mailto:[email protected];part of your dmarc TXT record. Note you didn't set any processing rule for failing messages: p=nonemeans you only want to see the results of the checks.

您正在接收这些 XML 报告,因为这是您rua=mailto:[email protected];dmarc TXT record部分询问的内容。请注意,您没有为失败的消息设置任何处理规则:p=none意味着您只想查看检查结果。

As you can read in the specification (RFC 7489), RUA stands for "Reporting URI of Aggregate reports". Using it you are telling every DMARC-compliant recipient server to send you a (daily) aggregate report for the emails it receives by you or sent on your behalf.

正如你可以在规范(阅读RFC 7489),RUA代表“ [Reporting ü的RIggregate报告”。使用它,您是在告诉每个符合 DMARC 标准的收件人服务器向您发送一份(每日)汇总报告,涵盖您收到或代表您发送的电子邮件。

Have a look at dmarc.orgwhere you can find a nice overviewof the system.

看一看dmarc.org,您可以在那里找到系统的一个很好的概述

What does this specific report from Google tells you?

这份来自 Google 的具体报告告诉了您什么?

<date_range>This is the time range this report refers to (in your case, may 12 - may 13)
<policy_published>It's the parsed content of the dmarc record Google found in your DNS zone
<source_ip>The IP the emails were sent from
<policy_evaluated>The result of the DKIMand SPFchecks are good (the two messages passed both tests).

<date_range>这是本报告涉及的时间范围(在你的情况下,可以在12 -月13日)
<policy_published>这是DMARC记录谷歌在您的DNS区域发现的解析的内容
<source_ip>的IP的邮件是从发送
<policy_evaluated>的结果DKIMSPF检查是好(两条消息都通过了两个测试)。

Meaning:

意义:

The two messages sent by an email address @yoursite.ru and received by Google mail servers between may12 and may13 were correctly signed (DKIM) and were sent from authorized IPs (SPF). Based on this, we can reasonably say that Google has only received legitimate messages from your domain.

由电子邮件地址@yoursite.ru 发送并在 5 月 12 日至 5 月 13 日期间由 Google 邮件服务器接收的两封邮件均经过正确签名 (DKIM) 并从授权 IP (SPF) 发送。基于此,我们可以合理地说 Google 仅收到来自您域的合法邮件。

回答by Peter Goldstein

There's no problem. Aggregate reports (like this one) are sent as a summary (typically daily) of all emails received by that receiver - passing and failing.

这里没有问题。汇总报告(如这个)作为该接收者收到的所有电子邮件的摘要(通常每天)发送 - 通过和失败。

The sample report you provided shows that all emails are passing, so there's nothing to fix.

您提供的示例报告显示所有电子邮件都在通过,因此无需修复。