You are reading a single comment by @stevo_com and its replies. Click here to read the full conversation.
  • I'm trying to add a filter into gmail to auto-forward specific emails. I can set up the conditions fine but I can't find an option to forward emails without adding a forwarding account and then I need access to that account as gmail sends a validation email. I don't have this as the point is to forward Uber emails to the app I use for expenses.

    Am I missing something, is there not a straightforward way to forward specific emails in gmail?

  • What is the account you are trying to forward them to? More specifically, what application does that account/app use to receive email? Even more specifically, does it verify DMARC?

    Uber sends its receipts using the Header From domain of uber.com

    This domain has a DMARC record which uses a blocking policy of "Quarantine". That is, any emails that purport to be from uber.com and do not pass the required authentication checks will be sent to the spam folder. Then next step for them will be to implement a Reject policy which will delete the same bad emails before they get to the intended address.

    The main reason for me brining this up is that Uber are likely authenticating the emails they send well enough to reach the address you registered with them. Gmail will run a DMARC check and it will pass.

    Once you auto forward this email, the Header From domain of uber.com will likely be retained and if it goes to another environment that checks DMARC, that will again check that the email is still well enough authenticated to pass.

    Now, forwarding definitely breaks one of the two required authentication protocols (SPF) leaving only DKIM to authenticate the email to a degree that the Quarantine policy isn't enacted which will send the email to the spam folder.

    DKIM can survive the forwarding process but it needs to be carefully configured to do so.

    Uber appear to be sending their DMARC reports to our competitor so I don't put any faith in them having been able to set this up well enough (the fact they are still at Quarantine and haven't yet moved to Reject is one sign they are stuttering).

    TLDR - if you set up an auto forward, the emails might not get to where you want to send them because the anti-domain-spoofing protocols could send it to the spam folder.

    You'd be better off doing it manually until ARC is introduced.

About

Avatar for stevo_com @stevo_com started