> Catch-all rule only applies on the zone-level domain, you can’t create catch-all rule for each of

Catch-all rule only applies on the zone-level domain, you can’t create catch-all rule for each of your subdomain.

Is this something that just isn't possible or will it come eventually? ie, it would be really nice to be able to regex the catch-all

Uuwinx is there a way to configure DMARC handling? I would like to temporarily disable ...

DarkDeviL•3/11/24, 10:07 PM

Only the domain owner (e.g. sender) can make such configurations, which would be by adjusting their DMARC policy.

Uuwinx also I found this report extremely misleading since I'm deliberately failing DKI...

DarkDeviL•3/11/24, 10:08 PM

The thing you see here, DKIM/SPF passing, but DMARC failing, ... is because the lack of alignment.

Here's an extensive elaboration on DKIM and the alignment: https://community.cloudflare.com/t/dkmi-not-aligned/484140/2

Uuwinx Alright, thank you. So, a `pass` for **DKIM status** merely represents the exist...

DarkDeviL•3/11/24, 10:49 PM

If we can extend that to "the existence of a valid signature, but not necessarily the alignment", - yes.

DarkDeviL•3/11/24, 10:50 PM

There could be for example 10 DKIM signatures on the message, with only one passing, it would still yell "pass", - but not necessarily be having the alignment.

CCatt0s > Catch-all rule only applies on the zone-level domain, you can’t create catch-a...

Catt0sOP•3/12/24, 1:19 AM

(I really think this woul be good)

Uuwinx I understand that, but isn't it still the receiving end's choice to follow the d...

DarkDeviL•3/12/24, 11:49 AM

It is indeed the receiver's choice who they want use for handling the MX / inbound traffic for their domain(s). So if they're unhappy with the final result of that decision, you're right - they should take advantage of the alternative option, by finding another provider that suits their needs.

DarkDeviL•3/12/24, 11:50 AM

That aside, I do completely understand your point of view as well, - however, we're dealing with a product here where it's main purpose generally is to forward messages.

DarkDeviL•3/12/24, 11:50 AM

You mentioned specifically email worker, - but what exactly are you doing in that email worker?

DarkDeviL•3/12/24, 11:52 AM

When your email routing, or your email worker ends up with the final decision to forward it to example@gmail.comexample@gmail.com, then Gmail will be rejecting due to the DMARC failure, even if Cloudflare didn't initially.

DarkDeviL•3/12/24, 11:54 AM

Microsoft (Outlook/Hotmail/...) previously didn't reject on DMARC failures, - but announced on 2023-03-22, that over the following 30 days, that they would now be doing that as well.

DarkDeviL•3/12/24, 11:55 AM

DMARC was made for domain owners to be able to control what treatment messages that couldn't be verified to be from them would get.

DarkDeviL•3/12/24, 11:55 AM

It wasn't made to be ignored...

DarkDeviL•3/12/24, 11:56 AM

So if you're ending up on passing on the message to another email address (email routing, email worker), there is no point for Clouflare to even try with DMARC failing messages, as they would be rejected later on anyway.

DarkDeviL•3/12/24, 11:59 AM

In fact, Cloudflare would see a reputational dive on those providers, if it just passed everything on, without any sanity checks, which would literally end up on killing #email-routing ...

DarkDeviL•3/12/24, 12:03 PM

Not alone that...

DarkDeviL•3/12/24, 12:03 PM

Preventing scam/phishing/etc...

bckd00r•3/12/24, 5:50 PM

Hey hi, I did mail forwarding on cloudflare, but every time I send an email, I get emails like this via cloudflare. Am I doing something wrong and the emails I send are generally "spam" in my customers' mailboxes. How can I solve this?

rdm•3/12/24, 5:58 PM

If you're testing, test from an address that's different from your endpoint address.

Rrdm If you're testing, test from an address that's different from your endpoint addr...

bckd00r•3/12/24, 6:08 PM

I don't understand? Do I need to send it externally via a 3rd mail? If so, should I use this mail address as a dumping ground and spam notifications will accumulate.

rdm•3/12/24, 6:12 PM

The error message suggests if you're endpoint email address is personal@gmail.com and you're sending tests emails to info@yourdomain... from the endpoint address (personal@gmail.com). You will likely find missing messages because of how google filters

rdm•3/12/24, 6:12 PM

So, if you're testing, test from some address other than what's listed above (that gmail address)

Xandar•3/12/24, 11:04 PM

Hello

Xandar•3/12/24, 11:05 PM

Can Email Routing be used to send emails from the custom domain address as well?

Original message was deleted

Xandar•3/12/24, 11:06 PM

Is there any other free service that allows that then?

Xandar•3/12/24, 11:06 PM

I really need one

naporitan•3/15/24, 5:37 AM

email routing is a very nice service. I use it all the time. Thank you very much.

On 3/14 at 16:00 JST, a number of email forwarding attempts using cloudflare's mail routing were failing.

The rejected reason on the dashboard was something like this. What was the failure?

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

RiskyMH•3/15/24, 12:11 PM

is there a reason email routing is spamming (i only sent one email)

RRiskyMH is there a reason email routing is spamming (i only sent one email)

Isaac McFadyen•3/15/24, 12:12 PM

Because delivery failed, it's retrying delivery.

RiskyMH•3/15/24, 12:12 PM

ah this must be new as it was working well until yesterday

RiskyMH•3/15/24, 12:12 PM

but thanks

RiskyMH•3/15/24, 12:13 PM

ok i think i worked it out, i somehow didnt catch an error with sending webpush

Darrel•3/17/24, 11:36 AM

I havent received an email that I sent. Is there any reason why?

Darrel•3/17/24, 12:04 PM

SPF status
pass
DMARC status
none
DKIM status
none
Rejected reason:
Unknown error: transient error (421): 4.7.0 [104.30.8.137 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 b9-20020a509f09000000b005670de70d89si3472931edf.528 - gsmtp

Why has Gmail blocked my messages? - Gmail Help

Troubleshoot delivery issues with Postmaster Tools Gmail Postmaster Tools provides senders with metrics on parameters such as reputation, spam rate, feedback loop, etc. It can help you prevent your em

rdm•3/17/24, 4:23 PM

You're sayign your email to your email-routing destinations aren't being delivered to google?

WNA•3/18/24, 1:06 PM

Hello

WNA•3/18/24, 1:07 PM

I cant received email

aaronarich•3/20/24, 12:35 PM

Just here to report that I'm also seeing a large spike in email undelivered to Gmail due to Cloudflare IP reputation.

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

rdm•3/20/24, 12:48 PM

That support entry talks about your domain reputation, not IP. IP reputation is https://support.google.com/a/answer/27642

Fix email bounces due to blocked IP address - Google Workspace Admi...

Occasionally, you or your users might send mail that bounces because the recipient blocked your IP address. When an IP address is blocked, all mail from the address bounces. Some domains use a de

Rrdm You're sayign your email to your email-routing destinations aren't being deliver...

Darrel•3/21/24, 7:24 AM

Yes. This is for a week now and how can I fix this?

Darrel•3/21/24, 7:24 AM

The response from the remote server was:
421 4.3.0 Upstream error, please check https://developers.cloudflare.com/email-routing/postmaster for possible reasons why. SB7k3doQEjkx

Cloudflare Docs

Postmaster · Cloudflare Email Routing docs

Reference page with postmaster information for professionals, as well as a known limitations section.

Cerv•3/25/24, 9:25 AM

Hello, I am obviously not only one with this problem, but I cant see any easy way how to fix this. Cloudflare keeps to get deny my e-mails with

is4.7.0 suspicious due to the very low reputation of the sending domain.

DDarkDeviL So if you're ending up on passing on the message to another email address (email...

dave•3/26/24, 3:58 PM

There's quite a few use-cases that we already have deployed, that use Email Workers and do not forward the message.

DDarrel SPF status pass DMARC status none DKIM status none Rejected reason: Unknown erro...

dave•3/26/24, 3:59 PM

you should add a DMARC policy, and ideally DKIM too.

Ddave you should add a DMARC policy, and ideally DKIM too.

Darrel•3/26/24, 9:58 PM

What should I put or what's the setup for DMARC policy?

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

> Catch-all rule only applies on the zone-level domain, you can’t create catch-all rule for each of

Similar Threads

Similar Threads

Similar Threads