§2024-09-30

cat 'google.com!yushei.net!1727568000!1727654399.xml'

<?xml version="1.0" encoding="UTF-8" ?>
<feedback>
  <report_metadata>
    <org_name>google.com</org_name>
    <email>noreply-dmarc-support@google.com</email>
    <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
    <report_id>572900376066563629</report_id>
    <date_range>
      <begin>1727568000</begin>
      <end>1727654399</end>
    </date_range>
  </report_metadata>
  <policy_published>
    <domain>yushei.net</domain>
    <adkim>r</adkim>
    <aspf>r</aspf>
    <p>none</p>
    <sp>none</sp>
    <pct>100</pct>
    <np>none</np>
  </policy_published>
  <record>
    <row>
      <source_ip>59.126.118.194</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>yushei.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>yushei.net</domain>
        <result>fail</result>
        <selector>sep2024</selector>
      </dkim>
      <spf>
        <domain>yushei.net</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>59.126.118.189</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>yushei.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>yushei.net</domain>
        <result>fail</result>
        <selector>sep2024</selector>
      </dkim>
      <spf>
        <domain>yushei.net</domain>
        <result>softfail</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>59.126.118.193</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>pass</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>yushei.net</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>yushei.net</domain>
        <result>fail</result>
        <selector>sep2024</selector>
      </dkim>
      <spf>
        <domain>yushei.net</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
</feedback>

Structure Overview

XML Declaration:

Root Element:

is the root element containing all report data.

Key Sections Report Metadata:

Contains information about the report's origin. <org_name>: Name of the organization generating the report (Google). : Contact email for support. <extra_contact_info>: Link to more information. <report_id>: Unique identifier for the report. <date_range>: Start () and end () timestamps for the report period in Unix epoch format. Policy Published:

Details about the DMARC policy published by the domain. : The domain the report pertains to (yushei.net). and : Alignment modes for DKIM and SPF (both are "relaxed" in this case).

: Policy for emails failing DMARC (set to "none", meaning no action is taken). : Subdomain policy (also "none"). : Percentage of messages to which the policy is applied (100%). : No policy for reporting.

Records:

Each represents an email authentication evaluation. Inside each record: Row: Contains the source IP address, count of emails from that IP, and the policy evaluation result (disposition and authentication results). Identifiers: The "From" header of the email. Auth Results: Results of the DKIM and SPF checks. : Shows DKIM results, including the domain, result (fail in all cases here), and selector used. : Shows SPF results, indicating whether the IP passed or failed the SPF check. Analysis of Records Record 1:

Source IP: 59.126.118.194 DKIM: Fail, SPF: Pass Disposition: None (no action taken) Record 2:

Source IP: 59.126.118.189 DKIM: Fail, SPF: Fail Disposition: None Record 3:

Source IP: 59.126.118.193 DKIM: Fail, SPF: Pass Disposition: None

• Conclusion

The report indicates issues with DKIM authentication for emails sent from the domain yushei.net, while SPF results vary, with some passing and others failing. The policy is currently set to "none," meaning the domain owner is not taking any action on emails that fail authentication checks. This could suggest that the domain owner is monitoring their email authentication practices before deciding on a stricter policy.