Google Workspace

Email

Use Google Postmaster Tools to debug deliverability issues from AWS to Gmail.

These services send email from open-contracting.org:

These services send email from noreply.open-contracting.org:

These services send email from payments.open-contracting.org:

Servers send email from their FQDN, like ocp42.open-contracting.org.

Check DNS configuration

  1. Google Admin Toolbox Check MX should report no problems (all green).

  2. MXToolBox Domain Health Report should report no errors (only warnings).

Check DMARC compliance

Send an email to ping@tools.mxtoolbox.com and check the results (all green).

Similar tools include mail-tester and Postmark’s Spam Check.

Monitor DMARC reports

The DMARC policies send aggregate reports to Postmark’s DMARC Digests and DMARC Analyzer (defaults to reporting today only):

$ dig TXT _dmarc.open-contracting.org
v=DMARC1; p=none; rua=mailto:re+tvgueigvygp@dmarc.postmarkapp.com,mailto:e57de3ae23df489@rep.dmarcanalyzer.com;

$ dig TXT _dmarc.noreply.open-contracting.org
v=DMARC1; p=none; rua=mailto:re+jbvvmcsfauo@dmarc.postmarkapp.com,mailto:e57de3ae23df489@rep.dmarcanalyzer.com;

$ dig TXT _dmarc.open-spending.eu
v=DMARC1; p=quarantine; rua=mailto:re+wtazrnx9nxe@dmarc.postmarkapp.com,mailto:e57de3ae23df489@rep.dmarcanalyzer.com;

DMARC compliance should be over 95%, and DKIM alignment should be over 90%. Failures should be 3% or less.

Note

Mailchimp is not SPF aligned; therefore, we have no target for SPF alignment. It sends mail from mcsv.net, mcdlv.net, mailchimpapp.net and rsgsv.net.

Note

DMARC Analyzer displays a “DKIM invalid” warning due to AWS SES using null DKIM records.

In DMARC Analyzer, when filtering per result sending domains with volumes of less than 10 can be ignored. For google.com:

  • SPF misalignment with calendar-server.bounces.google.com can be ignored.

  • Google Groups rewrites the From header only if the DMARC policy is “reject” or “quarantine”.