I try to sent emails from different domain names using one email account and get dmarc=fail

For example, I have:

example.com (in this domain I create account) need.com (additional domain) I want to give the users the ability to send emails as @need.com using alias in accounts settings.

The problem is that all messages go to spam with DMARC policies.

Authentication-Results: mx.google.com; 
dkim=pass [email protected] header.s=20150623 header.b="y0qDXN/D";
spf=pass (google.com: domain of [email protected] designates 209.85.220.41 as permitted sender) 
[email protected];
dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=need.com

It is necessary to configure so that everything would work correctly with the quarantine DMARC policy. Is it possible? Maybe someone has a practical solution to this problem?

Presumably the problem is in the difference of headers but could not figure out how to solve it.


Solution 1:

DMARC only passes if it meets the alignment criteria, and that's what you're tripping up on. You need to fix at least one of SPF or DKIM so they align to the From: header.

Solution 2:

*.20150623.gappssmtp.com indicates that you don't have a custom DKIM setup for your Google Workspace.

SPF is failing because of misalignment. When you send an email from Alias setup (from Google Workspace), your MailFrom: will be your Primary domain (primarydomain.com), and your From: address your Alias domain(aliasdomain.com), failing alignment, leading to SPF failure in regards to DMARC.

To fix this, make sure you set DKIM for your alias domain from your Google Workspace admin portal. You will pass DMARC with DKIM Alignment/pass.