This article will show you where the Source IP function is located in Valimail Enforce, what type of data is shown in the Source IP feature and how to interpret it.
NOTE: The Source IP feature is not available on all Valimail Enforce packages, so if you are interested in taking advantage of this feature and turning it on for your account, please contact your Valimail Customer Success Manager for more help with this.
TABLE OF CONTENTS
How to find the Source IP function
In order to get to the Source IP tab for each respective sending service that you see in the Authentication Reports page, you must first click on the service you wish to review.
Once you are on the authentication page dedicated for that specific service, next to the DMARC Authentication tab in Valimail Enforce, you will see another tab called Source IPS: This contains detailed information from the aggregate reports that pertain to that specific sender:
What information appears in the Source IP tab
Message Count: Shows the message volume.
Source IP: Shows what is the Source IP of the messages.
PTR Name: This is the Pointer Name for the IP in question.
Header From: This is also called the Friendly From and it is the actual visible sending domain. This does not need to match the org domain. It can also be a subdomain of that. (eg: subdomain.techco.example).
SPF Domain: This is also called the return path/envelope.from and is only visible in the email header or aggregate report. It is important for knowing if an email is SPF-aligned or not.
DMARC Result: This tells you if the email passed or failed DMARC authentication.
SPF result: This is a combined report for SPF pass and SPF alignment. It will only show a Pass if the source IP is part of the SPF record of the SPF domain and if the SPF domain is aligned with the Header From domain.
DKIM result: This is a combined report for DKIM pass and DKIM alignment. It will only show a pass if the email is DKIM signed and the DKIM signing domain is aligned with the Header From domain.