Need help with DMARC and SendGrid with PSF

[snagrat]

Emails sent from PSF (remittances etc) are failing to be delivered. The example that comes to me fails on DMARC

 

Authentication-Results: spf=pass (sender IP is 149.72.163.237)

smtp.mailfrom=sendgrid.net; dkim=pass (signature was verified)

header.d=sendgrid.net;dmarc=fail action=quarantine

header.from=school.org.uk;compauth=fail reason=000

 

 

The problem seems to be that the header.from address does not match the header.d and mailfrom domains.

 

My DMARC settings appear correct in M365 and passes all tests. PSF say it is nothing to do with them. 

 

How would I get these emails to pass DMARC checks?

[CHSGM]

Not sure if it relates, but when I implemented DMARC, we immediately noticed issues with PSF. When I spoke to their support, they confirmed it was an issue on their side: 

"I have taken a look into your emailing suite settings and I believe there are emails failing authentication due to your suppliers' settings. The current SMTP server that your remittance emailer is running from does not support SPF DKIM and DMARC email authentication processes. Therefore, my proposal would be to move you over to our SMTP2 server, which is tried and tested and supports email authentication."

 

Following their changes, everything was working as expected. 

[snagrat]

13 minutes ago, CHSGM said:

Not sure if it relates, but when I implemented DMARC, we immediately noticed issues with PSF. When I spoke to their support, they confirmed it was an issue on their side: 

"I have taken a look into your emailing suite settings and I believe there are emails failing authentication due to your suppliers' settings. The current SMTP server that your remittance emailer is running from does not support SPF DKIM and DMARC email authentication processes. Therefore, my proposal would be to move you over to our SMTP2 server, which is tried and tested and supports email authentication."

 

Following their changes, everything was working as expected. 

Was that recently?

[CHSGM]

1 hour ago, snagrat said:

Was that recently?

About 12 months ago. At the time of setup, they didn't account for this as there was no additional protocols in place. 

[CrootUK]

We’ve gone through all sorts of issues recently with another platform and sendgrid, its a real crap way to handle emails securely.. 

 

Could you send us your dmarc record please? particularly interested to know if your configuring adkim or apsf tags?