Hello 

 

We are receiving spoofed emails. We have perfectly setup spf, dkim, domainkeys and dmarc but still are receiving spoofed emails. The envelope from, and from fields are different . The from field is being spoofed. See below the header: 

 

	(envelope-from <m.rohail@domain2.com>)
	id 1bpFTi-0002oO-Pc
	for test@domain1.com; Wed, 28 Sep 2016 16:05:04 +0200
X-SmarterMail-Authenticated-As: m.rohail@domain2.com
Received: from  (UnknownHost [182.185.129.114]) by mail.hostbreak.com with SMTP;
   Wed, 28 Sep 2016 16:52:57 -0400
from: aziz@domain1.com
to: test@domain1.com
subject: testing the spoof after dmarc