Calendar notifications being sent to SPAM

[jco3]

I started a case with Google Support about calendar notifications being sent to SPAM.
We have (3) separate GWfE+ for three different schools.
The notifications are when an invite goes to a attendee from another school and they reply to the invite (Yes/No/Maybe)... then the notification email is classified as spam.

My investigation leads me to believe that the sending SMTP server that Google uses "calendar-server.bounces.google.com" is failing the DMARC check... I've checked our GW domain (all 3 domains we use, in fact), and it passes DMARC.

In the meantime, the "support rep" told me to create filters to not classify as SPAM.  Not easy to do with 5,000+ users (x3).  Not a good solution IMO.  I'd rather fix the root cause.

Is there a method to do this "filter solution" at a global level that will NOT require it to be run over and over again as we add new users?
Has anyone else seen the calendar notification going to SPAM issue?

[Jay Lee]

Are any of these accounts forwarding between schools/mailboxes?

This is the behavior I'd expect to see for forwarded accounts.

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/e2fd63fa-c036-4331-8bf7-17f510c43e47n%40googlegroups.com.

[jco3]

Scenario
- An event is created
- Invitees are from (3) distinct GWfE (those Invitees are in organizer's address book)
- The invitees reply using the normal Yes/No/Maybe
- Google sends a calendar notification from invitee GWfE user to the organizer
- The organizer doesn't see the message because it goes to spam

Why would someone that the organizer invites have the reply be classified as spam?
Shouldn't Google know that the organizer is expecting a reply and deliver it to the Inbox?
Shouldn't Google be able to verify the invitee identity thus know that the reply that Google is sending on behalf of the invitee is not spam?

I would understand if this was phishing or an unsolicited event invite... but it is not.


In the short term, is there a way to create a global filter in Gmail?
Or at the service level, is there a way to allow always and ensure event replies to go to Inbox?

[jco3]

Comparing school DMARCs now.
Seeing that there may be a difference.

Two schools do not experience the issue between invitees responding to organizers/events. 
Invitees from the 3rd school have their responses classified as spam.

[jco3]

Testing is showing that the issue is resolved with a modification to the DMARC on the problem GWfE domain DNS.
Odd though.  The other two GWfE domain DNS had the same exact DMARC record.

The change was from "p:quarantine" to "p:none".  Per https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F2466563%3Fhl%3Den&assistant_id=generic-unu&product_context=2466563&product_name=UnuFlow&trigger_context=a

Odd that the DMARC was set up with that quarantine and it became problematic (and only on one).

I'll post back again once we finalize testing and perform final validation.
But initial tests don't result in the spam classification any longer.

[Brian Kim]

Make sure you are using your own DKIM key. 

If you are using default DKIM key (gappssmtp) then it could pass DKIM but not DKIM aligned causing DMARC to fail if it also is not SPF aligned.