- Shipped
- November 15, 2026 at 12:43 PM UTC
- Author
- Kamo
- Commit
- 0101623
dmarc-reports@ at every sending domain (a CNAME to contact.kamocrm.com, so its MX is here) and at contact.kamocrm.com is accepted from any sender, spooled by a dmarcreports pipe and posted by a dmarc-mail sidecar (unsubscribe_mail.py with INCLUDE_RAW) to EmailService's **************** which keeps only DKIM-signed reports about organizations' sending domains (DMARC Ramp Coach). Checked before the bounce-only rule; every other address at a sending domain still takes the null sender only.