Support Return Path and DMARC

This Optional Feature, when enabled, adds additional diagnostic and security support for your email communications.

The additional features provided include:

  • Self-service Custom Return Paths. You can add a custom return path to your outbound email from each email domain. This provides you with support for domain-management of bounced email messages and also provides support for Domain-based Message Authentication, Reporting, and Conformance (DMARC).
  • DMARC. DMARC provides you with additional protection for your email From domains:
    • Reporting. All Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) failures can be collected daily and sent out in summary emails to a domain administrator.
    • Alignment. DMARC ensures that the Mail From address is aligned with the smtp.mailFrom address in the mail envelope header. This is an important step to prevent email spoofing.

The newly added Return Path and DMARC monitoring columns are shown below, along with an error message regarding the absence of a configured return path.  For more information about the validations performed and the messages provided, please see the Mail Validation Troubleshooting section of Help.

The page below is accessed via Business Process Automation > Power Data > Mail Management > Mail Senders.

Return Path and DMARC Example Validation

Return Path and DMARC Example Validation

This feature provides additional monitoring and security capabilities to ensure the secure and successful delivery of the system's email communications.

Steps to Enable

The Return Path and DMARC functionality is enabled with the Optional Feature - SUPPORT RETURN PATH AND DMARC - this feature must be Opted In to take advantage of the provide functionality.

If you need to change the Opt In state for this feature:

  • Go to the Optional Feature UI - Configuration and Administration > Property Management > Optional Features.

NOTE: Only the DBA.ADMIN user can access and use the Optional Features page.

  • Select the Support Return Path and DMARC feature.
  • Run the desired Action for the feature - Opt In or Opt Out.

The steps required to add a Return Path are well documented in the Help under the Configuring a Custom Return Path section.

At a high level the steps include:

  1. Validating the mail domain to make sure the DKIM records are fully configured and active. 
  2. Adding the Return Path. This page is accessed via Business Process Automation > Power Data > Mail Management > Mail Domains. DBA Admin required.
  3. Selecting a subdomain prefix. All Return-Paths must be a subdomain of the Email Domain.
  4. Creating a DNS CNAME record for the return path's CNAME subdomain.

Tips And Considerations

Note, neither Custom Return Paths or DMARC are required for successful receipt of outbound email.  Unlike SPF and DKIM validation, no mailbox will refuse a mail from Mail Delivery due to a lack of DMARC, however, our recommendation is to implement SPF, DKIM, Return Path and DKIM to maximize the protection and deliverability of your email.