[FIXED] How to track emails which are not DKIM aligned

Issue

I've set up DKIM on my domain and configured Postmark to send me a DMARC Daily Digest to monitor that everything is set up correctly. Each week, I have around half of my emails sent through Google marked as not DKIM aligned:

Any idea to how to track down the problem. I'm pretty confident, that I've correctly configured the email correctly in G Suite, which the 100% indicators on the two other IPs also show.

Solution

Many times, seeing DKIM (and / or SPF) misalignment in DMARC aggregate reports comes down to forwarding. In this particular case, you are likely seeing recipients hosted on Google having Distribution Groups forwarding to internal addresses. Google adds these DMARC authentication results to the DMARC aggregate reports it sends out, even though they are internally routed messages.

I've written an answer on this matter before here.

Answered By - Reinto

Answer Checked By - Mildred Charles (PHPFixing Admin)