DMARC policy and distribution through third-party services?

Question

SPF

Good afternoon.

Some time set up a DMARC entry like:

v=DMARC1; p=reject; pct=10; sp=reject; adkim=s; aspf=s; fo=1; ruf=mailto:[email protected]; rua=mailto:dmarc_re[email protected]

But our marketers needed to do mailings through a third-party service. Which in response displays the following error:



As I understand it, the whole problem is in the DMARC parameters: adkim=s; aspf=s;

Which indicate a strict correspondence between dkim and dmarc

How to proceed in general in this situation? To make mailings work and not allow too much?

Answer 1

You need to set up SPF and DKIM for all mail services that will send mail on behalf of your domain. Those. for the mail service that marketers will use, you need to:
1. Add its SPF to yours, usually this is done through include, for example

domain.ru. TXT "v=spf1 ip4:1.2.3.4 include:spf.someservice.com ~all"

2. Add the service's public DKIM key to your DNS zone, usually done by posting a TXT record or adding a CNAME
for instructions on setting up SPF and DKIM all services provide, look for the instructions for the service you are going to use.

Answer 2

well, everything is correct, he writes
first you configure
spf
dkim
and only after running dkim
dmarc