From Newsgroup: comp.mail.sendmail

Anybody know why I get dozens of duplicate DMARC email reports? I got
27 this morning for 1 email. It passed both SPF and DKIM. All with the
same report number.
--

Knute Johnson

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Knute Johnson wrote:

Anybody know why I get dozens of duplicate DMARC email reports? I got
27 this morning for 1 email. It passed both SPF and DKIM. All with the same report number.

This seems like a fairly useless problem report...
Maybe some details would be helpful?

Did you check the logs?
Who sent the mails?
Maybe you should ask the sender?
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

On 11/12/25 10:10, Claus A|fmann wrote:

Knute Johnson wrote:

Anybody know why I get dozens of duplicate DMARC email reports? I got
27 this morning for 1 email. It passed both SPF and DKIM. All with the
same report number.

This seems like a fairly useless problem report...
Maybe some details would be helpful?

Did you check the logs?
Who sent the mails?
Maybe you should ask the sender?

There is no sender to ask. They come from google but a no reply
address. It's an inbound email, the logs won't tell anything. If I
knew who to ask, I wouldn't have asked here. The support address in the
email is just instructions to set up DMARC.

Sorry about the formatting, I couldn't figure out how to keep it when I
copied the text.

The count went up, 28, another just came in.

<feedback>
<version>1.0</version>
<report_metadata>
<org_name>google.com</org_name>
<email>noreply-dmarc-support@google.com</email> <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
<report_id>11937603365852093311</report_id>
<date_range>
<begin>1762819200</begin>
<end>1762905599</end>
</date_range>
</report_metadata>
<policy_published>
<domain>?.org</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>quarantine</p>
<sp>quarantine</sp>
<pct>100</pct>
<np>quarantine</np>
</policy_published>
<record>
<row>
<source_ip>?.?.?.?</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>?.org</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>?.org</domain>
<result>pass</result>
<selector>2025</selector>
</dkim>
<spf>
<domain>?.org</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
</feedback>
--

Knute Johnson
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

On 11/12/25 10:28, Knute Johnson wrote:

On 11/12/25 10:10, Claus A|fmann wrote:

Knute Johnson-a wrote:

Anybody know why I get dozens of duplicate DMARC email reports?-a I got
27 this morning for 1 email.-a It passed both SPF and DKIM.-a All with the >>> same report number.

This seems like a fairly useless problem report...
Maybe some details would be helpful?

Did you check the logs?
Who sent the mails?
Maybe you should ask the sender?

There is no sender to ask.-a They come from google but a no reply
address.-a It's an inbound email, the logs won't tell anything.-a If I
knew who to ask, I wouldn't have asked here.-a The support address in the email is just instructions to set up DMARC.

Sorry about the formatting, I couldn't figure out how to keep it when I copied the text.

The count went up, 28, another just came in.

<feedback>
<version>1.0</version>
<report_metadata>
<org_name>google.com</org_name> <email>noreply-dmarc-support@google.com</email> <extra_contact_info>https://support.google.com/a/answer/2466580</ extra_contact_info>
<report_id>11937603365852093311</report_id>
<date_range>
<begin>1762819200</begin>
<end>1762905599</end>
</date_range>
</report_metadata>
<policy_published>
<domain>?.org</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>quarantine</p>
<sp>quarantine</sp>
<pct>100</pct>
<np>quarantine</np>
</policy_published>
<record>
<row>
<source_ip>?.?.?.?</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>pass</dkim>
<spf>pass</spf>
</policy_evaluated>
</row>
<identifiers>
<header_from>?.org</header_from>
</identifiers>
<auth_results>
<dkim>
<domain>?.org</domain>
<result>pass</result>
<selector>2025</selector>
</dkim>
<spf>
<domain>?.org</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
</feedback>

Two more identical emails just showed up, that makes 30 so far this time.
--

Knute Johnson
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

On 12.11.2025 10:04 Uhr Knute Johnson wrote:

Anybody know why I get dozens of duplicate DMARC email reports? I
got 27 this morning for 1 email. It passed both SPF and DKIM. All
with the same report number.

How does your DMARC record look like?

It might be a bug at Google if they send you the same report multiple
times.

Although, if a mail went out to many people (mailing lists etc.), you
might receive various reports because they go to different domains at
Google that might handle DMARC reports separately.

As I do not have any benefit of those reports, I removed report address
from my DMARC record.
--
kind regards
Marco

Send spam to 1762938248muell@stinkedores.dorfdsl.de

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

On 11/12/25 10:42, Marco Moock wrote:

On 12.11.2025 10:04 Uhr Knute Johnson wrote:

Anybody know why I get dozens of duplicate DMARC email reports? I
got 27 this morning for 1 email. It passed both SPF and DKIM. All
with the same report number.

How does your DMARC record look like?

It might be a bug at Google if they send you the same report multiple
times.

Although, if a mail went out to many people (mailing lists etc.), you
might receive various reports because they go to different domains at
Google that might handle DMARC reports separately.

As I do not have any benefit of those reports, I removed report address
from my DMARC record.

I'm thinking of removing mine. I went out to lunch and came back and I
have 28 more of exactly the same emails. I've had 3 or 4 before that
were the same but never over 50 like this.
--

Knute Johnson
--- Synchronet 3.21a-Linux NewsLink 1.2