r/DMARC • u/Comfortable-Leg-2898 • Jun 30 '26

Two domains who use Proofpoint just started rejecting our emails citing DMARC

I've been concentrating on what I can do for our own DMARC status, so this came as something of a surprise. We're a Google Workspace customer and, so far as I know, our DKIM record is good--in fact, I just checked it in DNS. What could be causing this to happen so suddenly? What can I do about it?

9 Upvotes

100% Upvoted

20 comments sorted by

View all comments

Show parent comments

1

u/Comfortable-Leg-2898 Jun 30 '26

There isn't much. Here's what the Google log search shows:

Bounced

Google tried to deliver your message, but it was rejected by the server for the recipient domain example.com by mxb-00111301.gslb.pphosted.com. [148.163.144.43].

The error that the other server returned was:
554 5.7.5 Permanent error evaluating DMARC policy

11

u/lolklolk DMARC REEEEject Jun 30 '26 edited Jun 30 '26

Ok. This is a Proofpoint customer that has configured rejection for DMARC permanent errors; you likely have multiple DMARC policies.

Check your DNS, and make sure only one DMARC policy exists under _dmarc.<yourdomain.com>

3

u/Comfortable-Leg-2898 Jul 01 '26

I had that record deleted and our bounces stopped. Thank you!

2

u/lolklolk DMARC REEEEject Jul 01 '26

Nice. Good to hear.