search

GSA / data.gov

Main repository for the data.gov service
https://data.gov
Other
659 stars 102 forks source link

Add a reporting address to DMARC record #954

Closed adborden closed 4 years ago

adborden commented 5 years ago

User Story

As an operator, I want DMARC aggregate reports so that I have a sense that email messages from the data.gov domain are getting delivered properly.

Details

There's been a few occasions where mail from the data.gov domain has been sent to spam or rejected. We've also had reports in the past of agency contacts not receiving harvest job reports. Setting up DMARC reporting so that we have some insight into how recipient servers are treating our messages would help us diagnose these.

Acceptance Criteria

adborden commented 5 years ago

Login.gov is using Agari for this. Follow along in #admins-dmarc.

hkdctol commented 4 years ago

This may be the reason that agency contacts have not been receiving daily harvest report emails recently. Even agencies that keep track of the emails and have been receiving them regularly report no emails the last few days. Harvest report emails are being received regularly in gsa.gov email for team members.

adborden commented 4 years ago

To integrate with Agari, we want to add their reporting address https://gsa-tts.slack.com/archives/CNDTG5ML5/p1571955616006500

mogul commented 4 years ago

@adborden has access to Agari and can get the email address we need to put in our DNS record, but anyone can initiate the change the DNS record by entering a GSA IT ServiceNow request.

adborden commented 4 years ago

FYI, I submitted the data.gov domain for verification in Agari.

On Mon, Jan 27, 2020 at 10:12 AM Bret Mogilefsky notifications@github.com wrote:

@adborden https://github.com/adborden has access to Agari and can get the email address we need to put in our DNS record, but anyone can change the DNS record.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/GSA/datagov-deploy/issues/954?email_source=notifications&email_token=AAD4OB4HVW53SXISPTVKNYDQ74PY7A5CNFSM4IWSZ6JKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKAQAZY#issuecomment-578879591, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAD4OB7Q7BE7BU7GLCZYZXTQ74PY7ANCNFSM4IWSZ6JA .

-- Aaron D Borden Lead Engineer | IT Specialist TTS | Data.gov https://www.data.gov

adborden commented 4 years ago

I also submitted the DNS request via service-now1 to update the DMARC record with Agari's reporting address.

On Wed, Jan 29, 2020 at 1:47 PM Aaron D Borden aaron.borden@gsa.gov wrote:

FYI, I submitted the data.gov domain for verification in Agari.

On Mon, Jan 27, 2020 at 10:12 AM Bret Mogilefsky notifications@github.com wrote:

@adborden https://github.com/adborden has access to Agari and can get the email address we need to put in our DNS record, but anyone can change the DNS record.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/GSA/datagov-deploy/issues/954?email_source=notifications&email_token=AAD4OB4HVW53SXISPTVKNYDQ74PY7A5CNFSM4IWSZ6JKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEKAQAZY#issuecomment-578879591, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAD4OB7Q7BE7BU7GLCZYZXTQ74PY7ANCNFSM4IWSZ6JA .

-- Aaron D Borden Lead Engineer | IT Specialist TTS | Data.gov https://www.data.gov

-- Aaron D Borden Lead Engineer | IT Specialist TTS | Data.gov https://www.data.gov

adborden commented 4 years ago

The DNS change was made and I'm seeing data rolling into Agari.

I documented some details about email for my own sanity on the wiki.