Forum Moderators: phranque
v=DKIM1; k=rsa; p=[random code]; Before using DMARC, you should make sure the domains used in the Envelope From (e.g., Return-Path or Mail-From), the "Friendly" From (i.e., "Header" From) and the d=domain in the DKIM-Signature are the same
Verification details:
mail-tester.com; dmarc=none header.from=example.net
From Domain: example.net
DKIM Domain: example.co
v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=1;rf=afrf;ri=86400;rua=mailto:hostmaster@example.net;ruf=mailto:hostmaster@example.net
SPF:
HOST: (none)
VALUE: "v=spf1 mx -all"
DKIM:
HOST: mail._domainkey
VALUE: "v=DKIM1; h=sha256; k=rsa; s=email; p=(key)
ADSP (not absolutely needed):
HOST: _adsp._domainkey
VALUE: "dkim=all"
DMARC:
HOST: _dmarc
VALUE: "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc-rua@example.com"
When you say they never get it - are you sure that's the case or do they just not bother to reply?
Have you checked your IP and mail server url in blacklists? There are a few multiple lists around to save you checking individual ones.