<![CDATA[your friend and mine, DMARC]]>I have a couple of domains for which I have Google running email for.

Cloudron creates DMARC records as well as DKIM / spf for this.

If I delete the DMARC then Google will send again.

How can I configure Cloudron to a) either enable Google sending or b) not keep recreating the DMARC record?

]]>https://forum.cloudron.io/topic/10344/your-friend-and-mine-dmarcRSS for NodeSat, 18 Apr 2026 07:05:30 GMTTue, 07 Nov 2023 05:02:55 GMT60<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 18:22:06 GMT]]>Yes I have DKIM setup. Thanks for the “relaxed” incantation. I’ll try that.

]]>https://forum.cloudron.io/post/76854https://forum.cloudron.io/post/76854Tue, 07 Nov 2023 18:22:06 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 15:46:16 GMT]]>@bmann you can just set a relaxed DMARC like in https://support.google.com/a/answer/10032473?hl=en . Something like v=DMARC1; p=none; rua=mailto:dmarc@solarmora.com . This will ensure atleast mails are not getting rejected because of DMARC. I would still double check though why Google thinks it cannot send emails for your domain. Have you set up DKIM for Google - https://support.google.com/a/answer/180504?hl=en ?

]]>https://forum.cloudron.io/post/76828https://forum.cloudron.io/post/76828Tue, 07 Nov 2023 15:46:16 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 15:38:16 GMT]]>@girish I flipped from wildcard to Let’s Encrypt Prod, so I suspect that’s when it got re-added.

I have an spf record (Cloudron added it and then I added google to the entry - although it looks like _spf.google.com is a new domain, I will add this)

Is there anything else google specific that should be in a DMARC entry?

I’ve never had a DMARC entry and never had any issues. If I add one, I can’t send via Gmail.

I’ll try a few things. Thanks.

]]>https://forum.cloudron.io/post/76826https://forum.cloudron.io/post/76826Tue, 07 Nov 2023 15:38:16 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 12:10:33 GMT]]>@bmann By default, Cloudron will add "v=DMARC1; p=reject; pct=100" . This entry means that emails that don't follow SPF and DKIM should all be 100% rejected.

  • Cloudron will only add DMARC record if it's absent .
  • Cloudron will only add the DMARC record if you press the 'Sync DNS' button manually. OR you enable/disable email for the domain. There is no cron job to periodically add DNS entries.

With the above in mind:

]]>https://forum.cloudron.io/post/76789https://forum.cloudron.io/post/76789Tue, 07 Nov 2023 12:10:33 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 09:25:33 GMT]]>@bmann said in your friend and mine, DMARC:

I don't have a DMARC entry

Sounds to me like if you were add one for Gmail that'd resolve your issue long-term.

]]>https://forum.cloudron.io/post/76763https://forum.cloudron.io/post/76763Tue, 07 Nov 2023 09:25:33 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 07:17:38 GMT]]>It doesn't override it. I don't have a DMARC entry, and every time one gets added, I can't send from my Gmail any more. I fix it by deleting the DMARC entry 🙂

]]>https://forum.cloudron.io/post/76754https://forum.cloudron.io/post/76754Tue, 07 Nov 2023 07:17:38 GMT<![CDATA[Reply to your friend and mine, DMARC on Tue, 07 Nov 2023 06:20:44 GMT]]>It's been a while since I've used the DNS APIs in Cloudron as I mostly use wildcard now, but I don't believe I ever saw Cloudron override an existing DNS entry, it just would create them if they didn't exist and update them if the server IP changed, not sure I noticed any _dmarc DNS conflicts. If it's something that the Cloudron DNS integration doesn't allow for though then I suspect you'll need to switch to wildcard DNS method instead so you have more control.

]]>https://forum.cloudron.io/post/76753https://forum.cloudron.io/post/76753Tue, 07 Nov 2023 06:20:44 GMT