<html><head><base href="x-msg://9432/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>One way to achieve this is to have your customer create a CNAME record that points back to your own infrastructure. Then you can make changes at will.</div><div><br></div><div>Hope this helps,</div><div>=- Tim</div><br><div><div>On Jun 1, 2012, at 2:45 AM, Jesper Knudsen wrote:</div><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div lang="DA" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Hi Michiel,<o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">It’s not specifically the subdomain I am thinking of but more the possibility to alter customers DMARC record without their involvement as I do for their SPF. I am basically just looking for means to achieve the same and think some kind of include statement should do the job.<o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">/Jesper<o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0cm; padding-bottom: 0cm; padding-left: 0cm; "><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span lang="EN-US" style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span><a href="mailto:michiel@rotorsolutions.nl" style="color: blue; text-decoration: underline; ">michiel@rotorsolutions.nl</a><span class="Apple-converted-space"> </span>[mailto:michiel@rotorsolutions.nl]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Michiel van de Vis<br><b>Sent:</b><span class="Apple-converted-space"> </span>1. juni 2012 08:39<br><b>To:</b><span class="Apple-converted-space"> </span>Jesper Knudsen<br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [dmarc-discuss] Include statement in DMARC DNS record<o:p></o:p></span></div></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">Hi Jesper,<o:p></o:p></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div></div><div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">I dont think this will help you much.<o:p></o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">Because when you use one subdomain, you also need to apply the same policy to all your customers.<o:p></o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">As the DMARC aligment is a per-client procedure, i don't think you need a subdomain for that.<o:p></o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">How do you see this?<o:p></o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div></div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">Michiel<o:p></o:p></div></div><p class="MsoNormal" style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 12pt; "><br><br><o:p></o:p></p><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; ">2012/6/1 Jesper Knudsen <<a href="mailto:jkn@scanmailx.com" target="_blank" style="color: blue; text-decoration: underline; ">jkn@scanmailx.com</a>><o:p></o:p></div><div><div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US">As a ESP for many customers without control of the their DNS, it would be very nice if we could alter the DMARC record on behalf of these customers without having them all take action (that will never work anyways). Today they are asked to insert our default record but I can imagine that over time we might want to change the policy, pct or report addresses.</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US">I would therefore recommend we consider having a include statement in the DMARC record (such as has been done with SPF) so that my customer can create a simple record such as "v=DMARC1; inc=_dmarc.scanmailx.com;”. If using a include statement then:</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US">1)</span><span lang="EN-US" style="font-size: 7pt; "> <span class="Apple-converted-space"> </span></span><span lang="EN-US">Only one level of recursion</span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US">2)</span><span lang="EN-US" style="font-size: 7pt; "> <span class="Apple-converted-space"> </span></span><span lang="EN-US">No other parameters mush be present</span><o:p></o:p></p><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US">This will make parsing of the record relative easy and not add to much additional DNS overhead.</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US">Comments?</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><b><span style="font-family: Verdana, sans-serif; ">Jesper Knudsen</span></b><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 8pt; font-family: Verdana, sans-serif; ">Scandinavian Mail eXchange</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 8pt; font-family: Verdana, sans-serif; ">Kløvervang 4 - DK-2970 Hørsholm - Denmark</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 8pt; font-family: Verdana, sans-serif; ">Phone: (+45) 36948330 Mobile: (+45) 21791763</span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 8pt; font-family: Verdana, sans-serif; ">Email:<span class="Apple-converted-space"> </span><span style="color: blue; "><a href="mailto:jkn@scanmailx.com" style="color: blue; text-decoration: underline; ">jkn@scanmailx.com</a></span><span class="Apple-converted-space"> </span>- Web:<span class="Apple-converted-space"> </span><span style="color: blue; "><a href="http://www.scanmailx.com" style="color: blue; text-decoration: underline; ">www.scanmailx.com</a></span></span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 8pt; font-family: Verdana, sans-serif; ">Like us on<span class="Apple-converted-space"> </span><span style="color: blue; ">facebook</span><span class="Apple-converted-space"> </span>- Follow us on<span class="Apple-converted-space"> </span><span style="color: blue; ">LinkedIn</span></span><o:p></o:p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US"> </span><o:p></o:p></div></div></div><p class="MsoNormal" style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 12pt; "><br>_______________________________________________<br>dmarc-discuss mailing list<br><a href="mailto:dmarc-discuss@dmarc.org" target="_blank" style="color: blue; text-decoration: underline; ">dmarc-discuss@dmarc.org</a><br><a href="http://www.dmarc.org/mailman/listinfo/dmarc-discuss" target="_blank" style="color: blue; text-decoration: underline; ">http://www.dmarc.org/mailman/listinfo/dmarc-discuss</a><br>NOTE: Participating in this list means you agree to the DMARC Note Well terms (<a href="http://www.dmarc.org/note_well.html" target="_blank" style="color: blue; text-decoration: underline; ">http://www.dmarc.org/note_well.html</a>)<o:p></o:p></p></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-top: 0cm; margin-bottom: 0.0001pt; "><o:p> </o:p></div></div></div>_______________________________________________<br>dmarc-discuss mailing list<br><a href="mailto:dmarc-discuss@dmarc.org" style="color: blue; text-decoration: underline; ">dmarc-discuss@dmarc.org</a><br><a href="http://www.dmarc.org/mailman/listinfo/dmarc-discuss" style="color: blue; text-decoration: underline; ">http://www.dmarc.org/mailman/listinfo/dmarc-discuss</a><br>NOTE: Participating in this list means you agree to the DMARC Note Well terms (<a href="http://www.dmarc.org/note_well.html" style="color: blue; text-decoration: underline; ">http://www.dmarc.org/note_well.html</a>)<br></div></span></blockquote></div><br></body></html>