I'm having an issue with email forwarding between two different domains: "domain1.com" hosted on Exchange and "domain2.com" on Google Workspace. We've got connectors set up properly, but here's the problem: when a user from "domain1.com" sends an email to a Google Group at "[email protected]", the email is forwarded to the group's members, but the sender appears as "domain2.com" despite being DKIM authenticated for "domain1.com". This leads to a DMARC failure, even though DKIM passes. I've been advised to add "domain1.com" to Google Workspace's DKIM settings, but I'm not sure if that will solve the issue since Google is merely forwarding the emails. In an update, Google Workspace support mentioned that because my DMARC policy is set to p=none, it's prioritizing the original "From" header integrity. Therefore, the Return-Path changes to "domain2.com" which causes the alignment mismatch. They said the rewriting would only happen if the policy were set to quarantine or reject. Can anyone confirm if changing the DMARC policy to p=quarantine would help, or suggest other solutions?
2 Answers
This specific issue appears to be isolated to Google Groups. If you can communicate directly between both domains without issues, focusing on the setup and configuration of Google Groups is a good call. You probably won't need to add anything to Google Workspace regarding DKIM for "domain1.com" if the problem is specifically with how the Google Group handles the forwarded emails.
It sounds like you've already gotten some good feedback from Google support. The key issue here seems to be the DMARC policy set to p=none. If you wanted proper alignment, switching to p=quarantine might be the way to go. Google Groups doesn't rewrite the From header unless the DMARC policy is more restrictive. Switching the policy will allow you to monitor how emails are treated during delivery, even if it seems scary to change it just to test, it might ultimately save you a lot of confusion and problems down the line.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures