Google Workspace

Email

Use Google Postmaster Tools to debug deliverability issues from AWS to Gmail.

These services send email from open-contracting.org:

These services send email from noreply.open-contracting.org:

These services send email from payments.open-contracting.org:

Servers send email from their FQDN, like ocp99.open-contracting.org.

Check DNS configuration

  1. Google Admin Toolbox Check MX should report no problems (all green).

  2. MXToolBox Domain Health Report should report no errors (only warnings).

Check DMARC compliance

Send an email to ping@tools.mxtoolbox.com and check the results (all green).

Similar tools include:

Monitor DMARC reports

The DMARC policies send aggregate reports to:

$ dig TXT _dmarc.open-contracting.org
v=DMARC1; p=none; rua=mailto:re+tvgueigvygp@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email;

$ dig TXT _dmarc.noreply.open-contracting.org
v=DMARC1; p=none; rua=mailto:re+jbvvmcsfauo@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email;

$ dig TXT _dmarc.open-spending.eu
v=DMARC1; p=quarantine; rua=mailto:re+wtazrnx9nxe@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email;

$ dig TXT dream-office.org
v=DMARC1; p=none; rua=mailto:re+yjzbqifwsvu@dmarc.postmarkapp.com,mailto:dmarc_agg@vali.email;

DMARC compliance should be over 95%, and DKIM alignment should be over 90%. Failures should be 3% or less.

Note

Mailchimp is not SPF aligned; therefore, we have no target for SPF alignment. It sends mail from mcsv.net, mcdlv.net, mailchimpapp.net and rsgsv.net.

Note

Tools might report a “DKIM invalid” warning due to AWS SES using null DKIM records.

Sending domains with volumes of less than 10 can be ignored. For google.com:

  • SPF misalignment with calendar-server.bounces.google.com can be ignored.

  • Google Groups rewrites the From header only if the DMARC policy is “reject” or “quarantine”.