Howto ensure Mail sent from workspace alias domain is not classified as spam.

[tback]

I'm admin for a workspace of 25users. We have a primary domain (example.org), an alias domain (alias.org) and a secondary domain (secondary.org).

I noticed that messages sent from alias.org are classifed as spam - even when sent from the gmail web interface.

This is the Authentication-Results Header of an email we sent from alias.org to another email domain (receiver.org) who's also a workspace user:

I redacted domain names and ip addresses to match the example above.

Authentication-Results: mx.google.com;
       dkim=fail header.i=@alias.org header.s=google header.b=XXXXXXXX;
       spf=pass (google.com: domain of user@example.org designates xxx.xx.xxx.xx as permitted sender) smtp.mailfrom=user@example.org;
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=alias.org;
       dara=fail header.i=@receiver.org

I followed google documentation to properly configure alias domains, spf, dkim, dmarc. Yet I assume this is failure to configure dmarc correctly. So it's failure on my part and proably missing from google documentation.

Please help, we don't like sending spam.

Best,

Till

[christiannewman · Accepted solution]

DKIM is failing. After adding the DKIM DNS records, did you remember to go back to the admin console and click

[tback]

Thanks @christiannewman . I can confirm. I rolled out a wrong DKIM record for alias.org and was able to correct it on friday. It made messages sent from us appear as 'user@alias.org (via example.org)'. This had me thinking a setting in workspace might have been wrong. With our DNS livetime of 3600s everything went back to normal within 3 hours.

[christiannewman]

Awesome!