Google Workspace#

Email#

Use Google Postmaster Tools to debug deliverability issues from AWS to GMail.

These services send email from open-contracting.org:

These services send email from noreply.open-contracting.org:

These services send email from payments.open-contracting.org:

Check DNS configuration#

  1. Google Admin Toolbox Check MX should report no problems (all green).

  2. MXToolBox Domain Health Report should report no errors (only warnings).

Check DMARC compliance#

Send an email to ping@tools.mxtoolbox.com and check the results (all green).

Similar tools include mail-tester and Postmark’s Spam Check.

Monitor DMARC reports#

open-contracting.org’s DMARC policy sends aggregate and forensic reports to DMARC Analyzer (defaults to reporting today only):

$ dig TXT _dmarc.open-contracting.org
v=DMARC1; p=none; fo=1; rua=mailto:re+tvgueigvygp@dmarc.postmarkapp.com,mailto:e57de3ae23df489@rep.dmarcanalyzer.com; ruf=mailto:e57de3ae23df489@for.dmarcanalyzer.com;
$ dig TXT _dmarc.noreply.open-contracting.org
v=DMARC1; p=none; fo=1; rua=mailto:e57de3ae23df489@rep.dmarcanalyzer.com; ruf=mailto:e57de3ae23df489@for.dmarcanalyzer.com;

DMARC compliance should be over 95%, and DKIM alignment should be over 90%. Failures should be 3% or less.

Note

Mailchimp is not SPF aligned; therefore, we have no target for SPF alignment. It sends mail from mcsv.net, mcdlv.net, mailchimpapp.net and rsgsv.net.

When filtering per result, sending domains with volumes of less than 10 can be ignored, and SPF misalignment with calendar-server.bounces.google.com can be ignored.