Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
44 views

Phishing email but with SPF, DKIM and DMARC in "PASS" status

I received an email from a company that looked fine. Gmail deemed it ok. I checked the domain and the various DMARC, DKIM and SPF headers: they are all in "PASS" status. The sender's IP also ...
sqrt-1's user avatar
  • 27
0 votes
1 answer
153 views

SPF spf.protection.outlook.com is invalid for messages within tenant

When sending mails through our Exchange 365 service those mails get through successfully, but if we look at the mail headers we see that where the sender and recipient are in our tenant the mail's ...
JohnLBevan's user avatar
  • 1,310
0 votes
1 answer
283 views

Is it a good idea to add `calendar-server.bounces.google.com` to my SPF record?

I'm trying to maximize my company's email deliverability and DMARC reports tell me we are failing DMARC SPF alignment with calendar-server.bounces.google.com which I suspect is the email server ...
Juan Pablo Santos's user avatar
0 votes
1 answer
57 views

Combining 2 Hosts for TXT SPF Records

Related to that question from @Jaeho Lee, Someone figured out a solution for the Host issue when you combined the two spf records? I am having the same issue; if so, can someone please advise? I have ...
bgbran's user avatar
  • 1
0 votes
1 answer
169 views

Combining 2 SPF records with 2 different host names

I have 2 spf records I need to combine. 1st spf record is: Host: front-mail Value: v=spf1 include:sendgrid.net ~all 2nd spf record is: Host: @ Value: v = spf1 include:zoho.jp ~all I've tried to ...
Jaeho Lee's user avatar
0 votes
1 answer
180 views

SPF records pass in Gmail sends but show failure in Postmaster

I'm using Sparkpost as the ESP to warm up a secondary domain. We've used this Sparkpost IP for our primary domain for a few months without a problem. I've been tracking the deliverability of the ...
asdfwaffles's user avatar
0 votes
1 answer
130 views

Why do I need to add third party senders to my domain's SPF record?

It's my understanding that SPF works on the envelope sender/return-path/RFC5321.MailFrom domain. We use a third party email service called Campaign Monitor and their domain has the required SPF record....
jamieburchell's user avatar
0 votes
2 answers
141 views

postfix + spamassassin check SPF from the email headers

I have postfix + spamassassin. Spamassassin suppose to check the SPF of the sender, but I received following spam: [email protected] = this is the email on my postfix Return-Path: <leonah@betterway....
Nick's user avatar
  • 852
0 votes
2 answers
72 views

Postfix spuriously checks SPF policy for authenticated, submitting mail clients

I am running Postfix 3.8.1 on Ubuntu 23.10. Postfix serves port 25 for incoming mail from other MTAs and port 587 for authenticated MUAs. Postfix is supposed to check SPF for mails from other MTAs on ...
user2690527's user avatar
3 votes
1 answer
1k views

SPF record in DNS sending via Gmail

I have an old domain that I want to re-purposes for a new website which will send emails. I'm using Asp.Net Core, if that makes a difference (I do not think it does). I've written several apps that ...
John's user avatar
  • 131
0 votes
2 answers
81 views

Should we add SPF records of popular email providers?

DMARC is reporting that a small fraction of our emails originate from google, microsoft, and some other providers. DMARC is also reporting that a good chunk of those emails fail both SPF and DKIM, and ...
rvh's user avatar
  • 109
0 votes
0 answers
124 views

DMARC and Postfix delivery reports

I successfully set up DMARC, DKIM and SPF for my mailserver's domain, but delivery reports created by Postfix fail the DKIM/SPF tests. The headers of regular messages (sent via my mailserver) look ...
janeden's user avatar
  • 257
3 votes
0 answers
337 views

SPF failure when sending to Google despite server being authenticated

I have encountered this issue several times recently and I've been struggling to confirm the source of the problem. Most recently, I saw this on a domain that uses Kerio for email. We'll call their ...
Charlie Patton's user avatar
0 votes
0 answers
297 views

Howto Whitelist incoming mails Docker-Mailserver (=Postfix)

I recently set up the Docker-Mailserver for our company (v. 12.1.0). It's working well so far, except for one thing: We receive automated emails from a customer's Redmine system. These emails are not ...
mmytx's user avatar
  • 1
0 votes
2 answers
124 views

A Non-MX mail server + Google Workspace, is this viable?

I have a domain (example.com) configured for sending and receiving mail using Google Workspace. I need to launch additionally a separate (own) mail server. Switching completely to the new server is ...
x-yuri's user avatar
  • 2,280
0 votes
1 answer
462 views

Should HELO, MAILFROM and From use the same domain?

I configured a mail server a couple of times before and I believe back then I thought that the answer is "yes." But I'm about to configure another one, and it seems that I was wrong. Let's ...
x-yuri's user avatar
  • 2,280
0 votes
1 answer
127 views

Exchange 2016 returning 550 5.7.1 when sending to our domain using 3rd party email sender sending on behalf of our domain

We have an on-premise Exchange 2016 server. Mail flow is normal. However, recently we started using a 3rd party email service to send out our newsletters (Klaviyo). When we send out campaigns our ...
Blaine Sherman's user avatar
0 votes
1 answer
115 views

SPF record for multiple mail origins

How do I craft a SPF record for mail.example.com when mail for the domain is sent from two locations: The mail server located at public IP address 198.51.100.111 aka mail.example.com. The web server ...
I Own I Owe Oh My's user avatar
1 vote
2 answers
253 views

Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?

I have an issue where email is being marked as spam by Gmail/Google Apps systems. When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
Ned Martin's user avatar
0 votes
0 answers
70 views

Change mail from header in sendmail

We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail. We are trying to configure now SPF and DMARC records for these DNS ...
Julia Mala's user avatar
0 votes
2 answers
464 views

Spammers slipping through SPF

One of the subscribers on the mailhost I run has been receiving scads of spam mail "from himself." With SPF set up and validated on the domain (wickenburg.us) this should not be happening. ...
Macs R We's user avatar
0 votes
1 answer
1k views

Postfix - can't send emails to gmail addresses via terminal

I have the following errors when trying to send emails to gmail addresses via my terminal: sudo tail /var/log/mail.log Jul 19 13:19:44 ubuntu-4gb-fsn1-1 postfix/cleanup[5780]: B4B8C5F4A3: message-id=&...
Run's user avatar
  • 101
0 votes
1 answer
777 views

Gmail adds multiple SPF records

When I connected my domain to gmail, it added two records to my DNS: TXT @ v=spf1 include:dc-aa8e722993._spfm.mydomainhere.com ~all TXT dc-aa8e722993._spfm v=spf1 include:_spf.google.com ~all But ...
Infamous911's user avatar
0 votes
1 answer
102 views

Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?

I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail....
cssdev's user avatar
  • 23
0 votes
2 answers
2k views

How to setup DMARC for both AWS SES and Office 365

I'm trying to get DMARC working for the emails I send via Office 365 as well as Amazon SES. It's working for Office 365 because I setup the SPF and DKIM records in my DNS but it's failing for the ...
Russell G's user avatar
  • 153
0 votes
2 answers
263 views

Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails

I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
sdek's user avatar
  • 165
0 votes
1 answer
516 views

SPF records. Allow HELO/EHLO but not sending emails

I have a mail server, let's say mail.example.com The PTR records connect mail.example.com with my server's ips (ipv4,v6). The HELO/EHLO response is mail.example.com Now I want to send letters like ...
Роман Коптев's user avatar
1 vote
1 answer
446 views

Is it still possible to use a catch-all email forwarder to gmail, and how?

Since ever, I've been using a catch-all email forwarder at a domain I hold, *@mydomain.net, and sending the email to my personal gmail account, [email protected]. I've just been ousted from my domain ...
AskUbuntuUser13085924's user avatar
0 votes
2 answers
471 views

Gmail reports SPF issues with emails sent from Thunderbird via postfix

This question is similar to the following question in the Mozilla forum. However, the answer given there to this question doesn't address the issue that I am seeing. Question in Mozilla forum: https://...
HippoMan's user avatar
  • 220
0 votes
1 answer
179 views

Mail being rejected despite SPF record specifying envelope IP address

I have a mail server with a bridged DSL modem connection; the domain's SPF record looks like this: "v=spf1 +mx +aa.bb.cc.dd -all" where the aa.bb.cc.dd is the IP address for my end of the ...
Gary Aitken's user avatar
0 votes
2 answers
1k views

SMTP Relay - Keep sender SPF valid

We use a email setup (incoming mails) in the following order: Internet -> on premises mailserver (=> attachment filter, antivirus, spam filter) -> forward to Microsoft 365 Exchange Online ...
Robin Reuter's user avatar
1 vote
2 answers
2k views

Why does DMARC fail for forwarded emails from this particular domain when it passes for all other domains?

I run a virtual mail server that forwards emails to my domain to a Gmail address, and I use PostSRSd to rewrite the addresses. For example, if someone sends an email to [email protected], my mail ...
John Doe's user avatar
  • 365
0 votes
1 answer
394 views

Hotmail does not flag or remove phishing messages from email addresses on a domain with SPF enabled [closed]

The email address of the sender of our newsletter is used for phishing purposes. We do have a valid SPF record (ends with -all) and dmarc on our domain (confirmed by mxtoolbox.com : every checks are ...
sglessard's user avatar
  • 109
5 votes
2 answers
1k views

Does adding another TXT record affect SPF authentication?

I am using multiple mail services for my domain sliver.proteuslake.asia, such as Mailjet, Google, and Atlassian. I have already added three TXT records for my domain: "v=spf1 include:spf.mailjet....
Duc Vo's user avatar
  • 153
0 votes
1 answer
364 views

Confused About Why SPF Needs My Email Apps Domain

FYI: we have a custom domain and we pay for Google Workspace to use that domain for our email/gmail. i have SPF, DKIM, & DMARC all setup, and a Google tek support person verified it was correct ...
SyberKnight's user avatar
0 votes
1 answer
165 views

Mail proxy with SPF and DMARC without changing FROM headers

Here is my situation. We have internal network, with lots of 2nd level subdomains - foo.internal.domain.ltd as example. Those subdomains may or may not have public DNS records with Class A IPs. Then, ...
ku4eto's user avatar
  • 185
0 votes
1 answer
321 views

SPF-record for domain vs. sub-domain

For historical reasons my e-mail address uses a subdomain: [email protected]. My sending (and receiving) servers are completely different from those of the top-level example.com itself. Recently, the ...
Mikhail T.'s user avatar
  • 2,377
6 votes
1 answer
386 views

Which has bigger priority between DMARC and SPF?

First off let me start by saying I understand DMARC and SPF do not do the same thing. However both have an option to tell the receiving servers what to do with mails that do not pass SPF (and DKIM in ...
Frizlab's user avatar
  • 163
0 votes
0 answers
344 views

postfix configuration to prevent bounces when relaying to 3rd party (e.g. src -> my@work -> my@gmail)

i have an active mail relay that is using aliases as a main tool, at some point we started to get bounces for some emails. Source: somerandomsenderdomain.com Destination: myemaildomain.com ...
DrunkMice's user avatar
0 votes
1 answer
211 views

Need to Add SPF Record

We had the warning about spf containing to many lookups. Deleted txt ourdomainname.com v=spf1 ip4:50.87.253.89 a mx include:websitewelcome.com ~all as we are no longer on bluehost which the ip ...
Kimberly 's user avatar
0 votes
2 answers
339 views

Root domain in SPF record instead of full hostname

Can i use root domain like google.com instead of _spf.google.com in SPF record?. My SPF record v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com include:mxsmtp.sendpulse.com +a +mx ~all ...
Stellan Coder's user avatar
0 votes
2 answers
279 views

SPF record not getting recognized for mail server domain?

I'm currently attempting to setup a mail server on Debian. So far I've installed postfix and opendkim. I've also configured an FQDN, rDNS, DKIM, DMARC, and SPF, but the latter doesn't work somehow. An ...
St4rb0y's user avatar
  • 59
1 vote
1 answer
540 views

How do i receive DMARC reports with external domains that i have no permission to control

I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do? Example just like: v=...
ShenLin's user avatar
  • 53
1 vote
0 answers
163 views

SPF Limits and SPF Merging

I am using Zoho Mail, AWS SES, GMAIL SMTP, Cloudflare email route and Yahoo SMTP. they all have there own SPF record. i saw on Google the only 1 SPF should be added in hostname and maximum 10 SPF ...
Mehul Kumar's user avatar
0 votes
2 answers
91 views

Mail Validation: SPF qualifier ?all

How do mail servers (i.e. MS Exchange) handle the ?all option at the end of an SPF record? I know from RFC 7208 that ? results in a neutral response. It means the SPF explicitly doesn't state whether ...
EaZyCode's user avatar
0 votes
1 answer
626 views

Bind9 one spf record for all zones

I want to create one include with SPF IP address to be used from all dns zones in my server. Can you suggest me how to do it? I work on BIND9. Thank you.
Andrey Simeonov's user avatar
1 vote
1 answer
302 views

I setup DMARC p=reject on server but now I can't send via gmail to gmail (using server email From address)

Did I shoot myself in the foot ? I mainly use gmail to send and receive emails. Support etc. My default 'send email as' profile is not the gmail address itself but an address on my server (also the ...
Peter's user avatar
  • 113
3 votes
0 answers
776 views

Set SPF to send email using Gmail

(Disclaimer: I totally suck at being a sysadmin) I am sending email for a domain using Gmail. The domain is partyboatcharters.com.au (I hope I am allowed to put domains here). Gmail is configured to ...
Merc's user avatar
  • 807
1 vote
1 answer
3k views

SPF Error - Cannot send emails to @gmail users

I get the following error, every time I tried to send an email to a gmail user. Error:"This is the mail system at host chimaera.otenet.gr. I'm sorry to have to inform you that your message could ...
Geo_G's user avatar
  • 11
0 votes
1 answer
144 views

How to proper dns zone config for selfhosted email server

Looking to harden the sending authentication of my email server, I am looking for some usefull hints on the topic. As I have in total 4 Vps Servers where emails will be send from, registration ...
KaliMucho's user avatar

1
2 3 4 5
18