Dmarc failure for Dropbox notification emails

[EJG1970]

I’ve read threads dating back to 2015 on this topic. My Dropbox verification emails stopped when I switched to a different email host. Traced it back to a DMARC failure because Dropbox apparently spoofs its own domain with another called amazonses.com. The only way I could get around this was to establish a server side rule that allowed emails from this domain to pass. Otherwise they were flagged as phishing attempts.

Dropbox, can you please fix this? This is very bad practice on your end!

[Hannah]

Hey @EJG1970, thanks for posting today.

Would you mind clarifying which email notifications you're not receiving?

Is it only the verification email that wasn't going through?

Any additional info on how this affects you, would be helpful.

Thanks.

[EJG1970]

When I create a Transfer, no notification email is received (now on Microsoft Exchange Online - used to work on GSuite). Also, when someone downloads a Transfer, no notification email is received.

These notifications are critical to my business as proof of deliverables to my clients. Thankfully, I got them to work again by creating a mail transport rule on the server that allows these messages to pass, and I reported all of the failed messages (in Quarantine on the server) to MS thinking maybe they could make an adjustment on their end.

The domain "amazonses.com" in the Transfer email's sender address tripped the Phishing trap on MS Exchange Online and caused all these messages to go to Quarantine. I found them and was able to release them. Now everything seems to be working.

But it should not have to be this complicated. I'm not an IT person and the time I spent fixing this problem was time I wasn't generating revenue for my business.

[Walter]

Hey there @EJG1970, I'm sorry for the late response. Are you still having issues with this?

Let us know if you do and we'll reach out via email to investigate further. 

Thanks!