Hi We use DKIM to sign outgoing emails and to verify incoming emails using DMARC. It works well, except when we get emails that are correctly signed by the ESA servers themselves. The flow is like this:Cisco ESA signs a mail with DKIM, and sends the ...

Right now, there are only three possible alternatives to handle mails that fail DMARC verification:* Let through.* Put in central quarantine.* Reject. These options are too limited. For example, many email lists still break DMARC verification, requir...