My entire organization is experiencing an issue where email delivery times are significantly delayed

[azizihazim]

Hi,
my whole organisation has same isue their email sending taking to long to receive. 
and some of their email get rejected.
here one of the error when i check..

btw im working for university, I'm still pretty new here , only been here for 10 months. and i need to take care gws admin portal for my university. i have around 10k user rn.

Has anyone in a similar situation get solve this problem? If so, how?

Thank you,

Azizi

[icrew]

Based on that error message, it sounds like your organization may not have SPF, DKIM, and DMARC set up properly/at all. See https://support.google.com/a/answer/10583557 for information about how to do that. These days, having those set up is pretty important for the reasons you identify.

Hope that helps,

Ian

[KrunalPatel]

Hi @azizihazim ,

Nice to e-meet you.

It looks like you need to set up the correct SPF and/or DKIM record for each platform you/your organization is using to send out emails. DMARC is optional but it is highly recommended to prevent email spoofing against your domain and increase and maintain your domain reputation in long run.

@icrew has shared the correct KB article here.

We are a Google Workspace premier partner based in the USA,  Please submit the form on our site: https://www.suitebriar.com/contact and we can discuss it over the call.

Krunal

[azizihazim]

im receiving this error message also. its says something wrong with mx record.

Rejected

DNS Error: DNS type 'mx' lookup of uis.edu.my failed with status: CANCELLED: [type.googleapis.com/util.ErrorSpacePayload='RPC::CANCELLED']

i've setup Spf, Dkim and Dmarc. and i update my dkim record.
i update it 2 week ago and the status is :

STATUS: Authenticating email with DKIM.
You must update the DNS records for this domain.

im using windows server 2003 as dns server btw. 

and the setup should be in external dns only right or do i need to update it in internal dns also?

[KAM]

This playbook might help but it sounds like your DKIM record is not available to the internet: https://docs.google.com/document/d/1mER-I5POhrlfcOTzfR1dw3MQFcKvKKw4o3IyQKSz3fU/edit?tab=t.0#heading... -KAM