Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
0 votes
1 answer
47 views

Are SPF records checked depth first or breadth first (or something else)

We have a domain which has 11 includes; so is failing SPF validation as it's gone over the limit. Most of the lookups are for third party resources, so flattenning the SPF record isn't ideal; we'd ...
JohnLBevan's user avatar
  • 1,310
1 vote
2 answers
314 views

Should we enhance DMARC to allow aligned DKIM enforcement?

Currently, DMARC only requires aligned DKIM or SPF. However spoofing SPF is relatively simple for an experienced hacker: You should only control a single IP address in the often large SPF range of e-...
m7913d's user avatar
  • 111
1 vote
2 answers
194 views

I don't understand DMARC reports regarding my policy

My DMARC settings seems to not work as expected. First, a few things to note: The domain is mydomain.com (not the real one obviously) ; The domain and mail provider is gandi.net ; I use Amazon SES to ...
Karl.S's user avatar
  • 115
0 votes
0 answers
381 views

configure iis6 smtp server to send from a specific IP

We have a dedicated Windows 2016 server that hosts multiple websites. Each site uses the IIS6 SMTP server to send emails from the websites (enquiries, order confirmations, etc.) - each site has a ...
scim1971's user avatar
4 votes
2 answers
1k views

Forwarding to Gmail account via Postfix: SPF record with a hard fail

I run a Postfix server which forwards one address to a gmail address. # /etc/aliases localuser: [email protected] This works since several months. But if a sender has a SPF record with a hard ...
guettli's user avatar
  • 3,803
0 votes
0 answers
79 views

Correct SPF record

I have been asked to apply DMARC protection to a domain. Part of this requires me to add an DNS record to the domain management console, however I have come across a stumbling block. The DMARC checker ...
Max Johnson's user avatar
1 vote
2 answers
610 views

Managing DNS lookup limit of SPF for a domain with many sending email services

I am webmastering for a sports association, and I would need to set up SPF records for the club's domain. However, I'm exceeding the 10 lookup limit, and would need guidance how to best resolve the ...
Joel Lehikoinen's user avatar
0 votes
1 answer
580 views

Email goes to spam even with valid SPF, DKIM and DMARC records, dynamic rDNS on AWS instance

I have an instance on AWS and fighting with sending emails through cPanel. All records are OK (checked on MX toolbox): SPF, DKIM, DMARC at the cPanel level and the WHM level (hostname). Even rDNS is ...
Adrian P.'s user avatar
  • 101
0 votes
1 answer
103 views

Managing SPF with multiple users on an email provider

I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
Neil C's user avatar
  • 9
0 votes
1 answer
84 views

How to set spf record to let my 2 server send mail by my domain?

Hi I'm using a directadmin server's hosting. when my website send mail by php, it will use [email protected] to send email out but mydomain.com's email is hosting by google workspace I was set to v=...
simonlo's user avatar
7 votes
3 answers
2k views

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with ...
clayRay's user avatar
  • 181
1 vote
0 answers
117 views

Postfix after-queue content filter

I am running a postfix/dovecot/spamassassin/clamav system on Debian 10 with Postfix 3.5.13 for my domains. One domain has a small private mailing list. If someone writes to the list postfix prepends ...
Leisniger's user avatar
1 vote
3 answers
445 views

SPF FAIL but DKIM PASS with my own domain

I do not understand the fail results in the following google DMARC report to our domain. I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes? <...
Kevin Roma's user avatar
0 votes
1 answer
78 views

SPF include a main domain & its subdomains

I need to configure SPF using ( include ) for one domain and its subdomains too at the same time Example : domain1.com has SPF for main domain + 4 subdomains domain1.com has spf v=...
Elizabeth F. Compton's user avatar
2 votes
1 answer
794 views

DKIM & SPF Allignment for Subdomains

We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
Granwille's user avatar
0 votes
1 answer
778 views

Publishing Exchange Server public IP address in a hybrid Exchange setup?

I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup. I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
Senior Systems Engineer's user avatar
2 votes
1 answer
4k views

DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing

People, Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com I got this error: DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against ...
Senior Systems Engineer's user avatar
7 votes
2 answers
1k views

How can I create and update the existing SPF record to allow more than 10 entries?

How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record? I wanted to add these two: include:mailgun.org include:sendgrid.net This is my ...
Senior Systems Engineer's user avatar
1 vote
1 answer
854 views

DMARC reports - fail then pass, and "softfail"

Here are two records from reports, with the actual domain name of my client replaced with "example.com". In the first one, SPF is marked "fail" above under "policy_evaluated&...
Devin Ceartas's user avatar
0 votes
1 answer
5k views

spf blocked- can't send emails to people who uses gmail

I use 1and1 Ionos for my email server - I can't send emails to people who use google gmail spf record v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de ~all I am not sure what I can do - ...
Victor Castillo's user avatar
0 votes
1 answer
592 views

SPF denying emails, and different IPs sender

I'm pretty new to email server configuration, so now I'm trying to make my SPF work well but I'm facing a strange problem. My SPF is like this v=spf1 +mx +a +ip4:xxx.xxx.xxx.xxx +include:_spf.google....
Anderson Silvestre's user avatar
0 votes
0 answers
190 views

Debugging occasional "Temporary failure in name resolution"

I have an internet-connected mailserver. A friend wants to send Email to one of the hosted domains. occasionally smtpd reports: Jun 24 00:56:22 myserver postfix/smtpd[xxx]: warning: hostname e2i740....
rew's user avatar
  • 101
0 votes
2 answers
3k views

gmail is rejecting my e-mails to a recipient with a gmail address with a 550-5.7.26

I have a fairly straight forward email setup using postfix. Within my house running on a raspberry-pi to which my router forwards all ports. I have a postfix instance that can see incoming mail. A ...
akc42's user avatar
  • 137
0 votes
1 answer
889 views

Network Solutions DNS not always returning DKIM and SPF records

If there is a more appropriate place to ask this or it is a duplicate, please tell me. I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
jdmayfield's user avatar
3 votes
3 answers
6k views

Can I stop a SPF SOFTFAIL in Gmail when sending to and from addresses that have a mail alias?

I have a vanity domain (mydomain.com) hosted by Gandi and configured with mail aliases for my family that point to our respective Gmail addresses: Alias Real address [email protected] [email protected] ...
Richard's user avatar
  • 133
1 vote
2 answers
211 views

Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?

Pretty new to spf/dkim and dmark. After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
John's user avatar
  • 897
1 vote
0 answers
502 views

520 ip and spf record not match

We are using Google Workspace and set Email forwarding using recipient address map to forward messages at our domain name (@example.com) to an external domain name (@external.com). Ex. mail sent to ...
user1822824's user avatar
1 vote
0 answers
2k views

How to configure EXIM to check SPF record for incoming emails and add 'Received SPF' header to the incoming emails?

I'm playing with Exim and created a mail server that can accept and send emails alright. Now, I want to enable SPF checking for every incoming email so that a Received SPF header is added to these ...
Md. Ishtiaq Ashiq Khan's user avatar
1 vote
1 answer
4k views

Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record

My environment: hMailServer 5.6.8 on Windows Server 2022 Standard Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
user3163495's user avatar
-1 votes
1 answer
874 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
Sandaru Akalanka's user avatar
1 vote
1 answer
837 views

How to replace "via amazonses.com" with my apps branding "via example.com" for the email identities in AWS SES?

So in SES - there are two ways to verify identities as I can see: Email identities Domain identities With domain identiies - it is easier to fix the "signed-by" and "mailed-by" ...
Rohan's user avatar
  • 135
8 votes
3 answers
1k views

Does SPF provide benefits along with DKIM+DMARC?

I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming ...
Tamás Sallai's user avatar
3 votes
3 answers
654 views

How to set up DNS settings with a domain in the middle for DKIM and SPF?

I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
Rohan's user avatar
  • 135
0 votes
1 answer
1k views

SPF Too Many DNS Lookups issue

In our scenario, We're running into an issue with our SPF records in route53. We are receiving SPF Too Many DNS Lookups because we are using multiple mail services. Is there a way to resolve this? I ...
Santosh Baruah's user avatar
1 vote
3 answers
76 views

Meaning of "sender"?

Reading documentation about SPF records, I can't quite seem to disambiguate the meaning of "sender". It could mean "the IP where the mail client sent the message" or it could mean &...
Dave Cousineau's user avatar
0 votes
0 answers
167 views

postfix to gmail silent delivery failure

With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
PaulProgrammer's user avatar
1 vote
1 answer
496 views

email validation: is there any point doing both SPF *and* reverse DNS tests?

For a receiving MTA, it seems to be unnecessary to check both the SPF record for an incoming SMTP connection, and to do an rDNS/PTR lookup. Consider: Server gets SMTP connection from aaa.bbb.ccc.ddd, ...
QF0's user avatar
  • 203
16 votes
3 answers
7k views

SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain

Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended ...
Ozzah's user avatar
  • 269
0 votes
0 answers
462 views

Softfail on forwarded emails sent through Yahoo mail - Is there a fix?

happy to be here. Excuse me for the wall of text but I am trying to help a friend who wants to keep on using his Yahoo mail for sending emails from his business email address. His mail server is on ...
Manou Allou's user avatar
1 vote
1 answer
2k views

postfix: how to force IPv4 through SMTP?

Problem I have successfully set up a Postfix mailserver with an SMTP interface, set up DKIM, DMARC, SPF, all that stuff. But I had a problem when testing the delivery of emails to Gmail. Namely, SPF ...
VaNa's user avatar
  • 137
0 votes
1 answer
2k views

How can it be possible dkim fails whereas spf pass

I have set up a postfix which sends emails. I have configure spf, dkim and dmarc (with p=none). I have checked with mail-tester: spf and dkim work fine. I have set up a dmarc rua in order to receive ...
Bob5421's user avatar
  • 361
0 votes
2 answers
1k views

send email from another server than FROM domain without being marked as spam

I want to send a mail from a website. The mail server from this domain is not publicly reachable, so I can't use that to send the mail. The webserver that hosts the website has another email server ...
Matthias's user avatar
  • 101
0 votes
1 answer
1k views

Compared to SPF MAIL FROM checks, what are HELO checks good for? [duplicate]

I’m starting with SPF on my (email) domain. (No DKIM or DMARC yet.) I see little usefulness in HELO identity checking in SPF and am thinking about setting the HELO identity to my domain (instead of ...
Robert Siemer's user avatar
0 votes
1 answer
1k views

Setup DNS records for SMTP send-only server

I have website on hosting with domain exmpl.com. I have DNS record for exmpl.com: exmpl.com MX(10) mail.exmpl.com mail.exmpl.com A XX.XX.XX.XX exmpl.com TXT v=spf1 +a +mx +a:hosting.server ~all All ...
Sasha Dzuruk's user avatar
1 vote
2 answers
2k views

SPF Records: Outlook shows fail, Google shows pass

I am using Office 365 for emails, and have configured the DNS SPF record as: v=spf1 include:spf.protection.outlook.com ~all When I send emails to Google recipients, the email headers show Received-SPF:...
Richard's user avatar
  • 111
3 votes
1 answer
2k views

How is this email passing DMARC?

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.) This is disturbing, as it shows as "from foo.com", yet the sender ...
Lawrence Wagerfield's user avatar
0 votes
0 answers
1k views

How to combine multiple SPF domains, one with an mx mechanism?

I combined 3 SPF records using the standard protocol, but got a null error after combining them. Individual records: v=spf1 include:spf.sendinblue.com mx ~all v=spf1 include:dc-aa8e722993._spfm....
pinktoads2's user avatar
0 votes
1 answer
485 views

How do I add individual mail-sending websites to my SPF record?

My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:...
ST7686's user avatar
  • 1
0 votes
1 answer
539 views

Why am I failing SPF only in my Google DMARC report?

Curious as to why my Google DMARC is coming back with a fail under SPF. Here is the report: <?xml version="1.0" encoding="UTF-8" ?> <feedback> <report_metadata> ...
2kreate's user avatar
2 votes
1 answer
1k views

Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?

Domain: franzoni.eu Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP ...
Alan Franzoni's user avatar

1
2
3 4 5
18