Periodic random/inconsistent spam scoring

[goalyodaoptimusprime]

Hi,

We appear to be getting some inconsistent spam scoring particularly around KAM_DMARC_REJECT

Attached is an example where an email address, from the same IP each time, is suddenly quarantined with nothing other than a KAM_DMARC_REJECT score. A few days previously fine, 6 hours later fine.

Any ideas? This inconsistency is proving problematic for the end users. It feels like if there is an issue determining the DMARC score it just defaults to max reject score.

Thanks.

 

[Stoiko Ivanov]

Attached is an example where an email address, from the same IP each time, is suddenly quarantined with nothing other than a KAM_DMARC_REJECT score. A few days previously fine, 6 hours later fine.

Any ideas? This inconsistency is proving problematic for the end users. It feels like if there is an issue determining the DMARC score it just defaults to max reject score.

DMARC also takes the From-header into consideration - without the headers and the actual domains in the logs it's not really possible to say why one got quarantined and the other went through.

https://martech.zone/what-is-dmarc/ - the graphics there seem to show how/what dmarc does regarding SPF/DKIM quite ok

I hope this helps!