Skip to main content
talsayyad
Staff
Staff
February 24, 2026

Technical Tip: How to override DMARC check result over SPF and DKIM checks

  • February 24, 2026
  • 0 replies
  • 458 views
Description This article describes how to override a DMARC check result over SPF and/or DKIM checks.
Scope FortiMail.
Solution
  1. In the GUI, navigate to Profile -> AntiSpam.
  2. Select the AntiSpam Profile needed and then Edit.
  3. Enable SPF and DKIM under DMARC override.
  4. The same AntiSpam profile will be applied to a Recipient Policy in order to be applied.
  5. Applying these configurations will make FortiMail apply the configured action profile for a DMARC check result, regardless of the check result of SPF and/or DKIM.

 

DMARC-OVERRIDE.png

 

Example logs: 

With DMARC override disabled, the email was blocked because it failed the SPF check. Although the DMARC check passed, the message was still rejected due to the SPF failure.

 

431497_1.JPG

 

With DMARC override enabled, the email was allowed even though the SPF check failed, because the successful DMARC validation overrode the SPF result.

 

431497_2.JPG

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT