Hotmail emanates abuse reports to DMARC address, erroneously assuming emails originate from its own IP RRS feed

  • Question

  • Recently I started receiving abuse reports from Hotmail, stating that:

    This is an email abuse report for an email message received from IP on Mon, 12 Jun 2017 15:53:06 -0700. The message below did not meet the sending domain's authentication policy.

    Sample attachment is quoted below (domain name is redacted as ****). Domain has all proper SPF, DKIM and DMARC settings and passes dkimvalidator.com tests. is NOT the domain's IP, but Hotmail's IP. Please advice on what can be done.

    Feedback-Type: auth-failure
    User-Agent: XMR/2.2
    Version: 1.0
    Original-Mail-From: <admin@****>
    Arrival-Date: Mon, 12 Jun 2017 15:53:06 -0700
    Message-ID: <1f81e1fa126894298e0c88f82b7a26c5@****>
    Authentication-Results: hotmail.com; spf=softfail (sender IP is; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=admin@****; dkim=fail (identity alignment result is pass and alignment mode is relaxed) header.d=****; x-hmca=fail header.id=admin@****
    Auth-Failure: spf
    Reported-Domain: ****
    DKIM-Domain: ****
    DKIM-Identity: @****
    DKIM-Selector: dkim

    • Edited by mb768 Tuesday, June 13, 2017 10:58 PM Forgot to mention that is Hotmail's IP.
    • Moved by Richard MuellerMVP Friday, June 16, 2017 2:01 PM Not a TechNet Wiki question
    Tuesday, June 13, 2017 10:57 PM


  • You have asked in the wrong forum. This forum is for questions and discussions about the TechNet Wiki. I believe you should ask your question in a Microsoft Answers/Community forum dedicated to Outlook messaging, such as this one:


    Search for similar questions, or click on "Participate" and select "Ask a Question". The Answers/Community forums are on a different platform, so we cannot move this question there. You will need to ask your question again. Sorry.

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Wednesday, June 14, 2017 6:35 PM