Diagnose email delivery problems from headers and DNS records

A findings note on SPF, DKIM and DMARC alignment, the hop where trouble starts and proposed record edits.

Choose one of three approaches. The steps for that option appear below.

Choose an option above. On a phone, swipe the tabs left or right to see all options →

Gemini: drafts delivery findings from headers and DNS

Gemini drafts hop tables and findings; you check mail-system evidence and approve proposed edits without changing DNS.

  1. You

    Collect raw headers and exact

  2. Gemini

    Draft the hop table

  3. You

    Check findings and record approved

  1. Collect raw headers and exact TXT records

    Use: You

    Have ready: raw message headers as text and the domain's SPF, DKIM selector and DMARC TXT records copied exactly as published.

    Check

    Records are quoted exactly as published; do not reformat or correct them. Check your organisation's rules before placing mail data into any tool.

  2. Draft the hop table and cited findings

    Use: Gemini

    Ask Gemini for hop, server, spf, dkim, dmarc, header_line; check against logs before requesting findings and proposed record edits.

    Details

    What to paste into the tool

    Task: Draft hop and result table (CSV: hop, server, spf, dkim, dmarc, header_line). Parse these raw email headers. Return a table with one row per hop: hop number, server, SPF result, DKIM result, DMARC result, and the exact header line each result comes from. Quote header lines exactly. If a result is absent, write absent. Task: Draft findings on SPF, DKIM and DMARC alignment with proposed record edits. Compare these authentication results with these DNS records. For each finding quote the exact header line or record text it rests on and name the hop where trouble starts; propose a record edit only where the evidence warrants one, otherwise write no edit indicated. Do not invent record values.

  3. Check findings and record approved edit proposals

    Use: You

    Check hops against logs and every quoted line against raw headers. Check each proposed edit against the mail system; record current rollback values.

    Check

    The admin confirms every proposed edit against their mail system before changing DNS, and keeps the old record to roll back. No DNS change is made by the workflow. Discard any finding without a header line or record to back it.

Before you paste into any AI tool, remove any confidential information. Put it back at the end.

Tools in this workflow

Deciding between Gemini and Mistral Vibe for this? See the comparison.

Final check

Each finding cites a header line or record text.

Records are quoted exactly.

The admin confirms every proposed edit against their mail system before changing DNS.

Old record values are kept for rollback.

Check data-handling rules before placing mail data into any tool.

Check the result against your original inputs. Approve it before sharing or acting.

What still needs checking
  • Whether mail headers and DNS records may be placed into any of these tools is for the organisation to confirm.

Share this page