Report domain: example.com Submitter: google.com Report-ID: 164300000xxx 와 같은 이메일이 오는 이유는?
Report domain email@example.com
결론부터 간단히 말하자면
아무 문제 없고 정상적인 동작에 의한 이메일이다.
DMARC 설정시 REPORT 받도록 이메일주소를 설정했기 때문.
In short: it’s all good.
Here’s the explanation for this:
DMARC stands for Domain-based Message Authentication, Reporting, and Conformance.
It is in fact a ruleset made for reporting back to you on the quality of the email messages received from your domain.
You are receiving those XML reports because it’s what you asked with the rua=mailto:firstname.lastname@example.org; part of your dmarc TXT record.
Note you didn’t set any processing rule for failing messages: p=none means you only want to see the results of the checks.
As you can read in the specification (RFC 7489), RUA stands for “Reporting URI of Aggregate Reports”. Using it you are telling every DMARC-compliant recipient server to send you a (daily) aggregate report for the emails it receives by you or sent on your behalf.
Have a look at dmarc.org where you can find a nice overview of the system.
What does this specific report from Google tells you?
<date_range> This is the time range this report refers to (in your case, may 12 – may 13)
<policy_published> It’s the parsed content of the dmarc record Google found in your DNS zone
<source_ip> The IP the emails were sent from
<policy_evaluated> The result of the DKIM and SPF checks are good (the two messages passed both tests).
The two messages sent by an email address @yoursite.ru and received by Google mail servers between may12 and may13 were correctly signed (DKIM) and were sent from authorized IPs (SPF). Based on this, we can reasonably say that Google has only received legitimate messages from your domain.