Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
1 vote
1 answer
911 views

DMARC Report: Sometimes DKIM Fails for Mail Server IP

What does it mean when some DMARC records indicate a failure for the correct server: <record> <row> <source_ip>1.2.3.4</source_ip> <count>8</count&...
Louis Waweru's user avatar
1 vote
1 answer
1k views

SPF and IPv6 fails even if the reverse DNS is created

When sending mails to Gmail I get this error Received-SPF: fail (google.com: domain of [email protected] does not designate 2a01:4f8:xxx::2 as permitted sender) client-ip=2a01:4f8:xxx::2; When I ...
clarkk's user avatar
  • 2,085
0 votes
0 answers
601 views

everything Pass but emails still go to the spam folder! I think it would be about hostname but not sure and don't know how to fix this

I checked too many topics and answers tested too many things! but can't find a solution to my problem. I'm a newbie user and maybe didn't understand some answers well. I need to fix this problem as ...
MrSmile's user avatar
0 votes
2 answers
1k views

SPF record for SMTP server

I am trying to set up my SPF records to take into account that I send emails via office365 directly in Outlook etc. as well as in a web app hosted in AWS which sends email to smtp.office365.com (...
smithy123's user avatar
2 votes
3 answers
4k views

Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com

I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? ...
cnst's user avatar
  • 14.3k
0 votes
0 answers
36 views

DKIM and SPF for Different Server [duplicate]

My situation like the following: Web server hosted in Google Cloud with domain name lets say: example.com Mail server hosted in Linode (lets say in server name: server.myserver.com) using cPanel with ...
Luxor's user avatar
  • 1
0 votes
2 answers
828 views

Postfix mail relay to external address, SPF Check

I have a question which is not about the configuration but about the question what is right and what not. The scenario: Organisation A (OrgA) has a Mailserver which is responsible for example.org. ...
Nico's user avatar
  • 135
6 votes
2 answers
1k views

Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?

I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
michau's user avatar
  • 61
3 votes
1 answer
190 views

SPF: Is ?all safe, and is it any different from having no policy at all?

A company I started working with had no SPF records on their domain. They are using multiple services (Google Apps and Shopify) that are sending e-mails from the company's domain with the company's ...
Chris's user avatar
  • 135
0 votes
2 answers
154 views

Which IP is SPF checks checked against

I am trying to work out which IP to put into an SPF record. I understand that SPF will extract the domain from return-path, So i guess SPF check will then do a DNS lookup to find the SPF record for ...
RippieUK's user avatar
1 vote
1 answer
452 views

Join multiple SPF in one string

I've read other thread about it but I've 2 different string with some parameters in only one (MX) so i ask some help to join in one string only in the correct way. 1) "v=spf1 include:spf.sendinblue....
Hart's user avatar
  • 13
0 votes
1 answer
569 views

How did this pass DKIM according to DMARC report?

I recently added a DMARC record for one of my domains. Let's call it mydomain.com: v=DMARC1;p=none;rua=mailto:[email protected];ruf=mailto:[email protected];fo=1" I have been ...
Mike's user avatar
  • 689
1 vote
1 answer
107 views

DKIM & SPF records should be on the sender email domain or on the smtp domain?

I have two(2) vps servers. One of them hosts my website and the other has Postfix installed on it. VPS[1]: websitedomain.com VPS[2]: postfixdomain.com I am using smtp.postfixdomain.com to send an ...
Melody's user avatar
  • 23
0 votes
2 answers
750 views

Further understanding of SPF, DKIM, and DMARC

I've been trying to wrap my head around some of the information I've gathered online, and I was hoping for some clarification. We are using Office 365, for our email server. A.) Are SPF records and ...
level42's user avatar
  • 199
0 votes
1 answer
4k views

Proper SPF record

Our company emails are usually treated as spam. When we checked our score on Spamassassin, our score was pretty bad, 3.3 and the main reason was our SPF record. We would like to update our SPF record ...
SQLfreaq's user avatar
1 vote
1 answer
546 views

Make my outgoing SPF records strict, and incoming policy lenient (postfix/dovecot)

I recently added an SPF record to my DNS records, so my email is less likely to be marked as spam. My SPF record looks like this: mpn.co. 86400 IN TXT "v=spf1 ip4:45.56.81.114 ip6:2600:...
3x5's user avatar
  • 121
2 votes
2 answers
8k views

How to read this DMARC report? Why does Yahoo still reject mails from my server?

I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on ...
Shaul Behr's user avatar
1 vote
1 answer
961 views

Gsuite DMARC SPF Setup Failure

I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC ...
AudRE's user avatar
  • 11
0 votes
2 answers
875 views

Emails fail DMARC check despite having the sender IP in SPF

I have the following DMARC record set up: v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; fo=0:1:d:s I have the following SPF record set up: v=spf1 mx -all the ...
SaidAlbahri's user avatar
0 votes
1 answer
654 views

dmarc. Why do I receive failed SPF or DKIM authentication reports for forwarders?

I set _dmarc to see my email authentication reports (in case it fails). like that "v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected]" And I receive these reports form Google. a ...
Yevgeniy Afanasyev's user avatar
1 vote
2 answers
1k views

SPF authentication mixed pass/fail without SPF record, in DMARC report [duplicate]

I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows ...
TSG's user avatar
  • 1,852
0 votes
0 answers
322 views

Mail issues only with Google App domains

I have a local mail server set up. It is connected via a dedicated IP (with an appropriate PTR record). I have DKIM, DMARC, and SPF set up. My domain has been added to Google's Postmaster Tools and ...
Joseph's user avatar
  • 153
1 vote
1 answer
2k views

SPF record longer than 255 characters in AWS Route53

I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
Matthew Morcaldi's user avatar
0 votes
2 answers
417 views

SPF records for a company with traveling (or remote) employees

I'm trying to set up a SPF record for the domain of a company whose employees use all sorts of SMTP servers.. But I think that line already contradicts itself ? Is this a problem ? They use several ...
commonpike's user avatar
1 vote
1 answer
963 views

How to build "SPF" ( multiple IPs) for authorizing other domains for sending mails behalf of them

We are building mail server to send mails for other domains. We have multiple IP address and i have created "A" record like spf.example.com pointing to multiple IP's Now I have asked client to ...
Balus's user avatar
  • 13
1 vote
1 answer
816 views

SPF passes when sending email to external recipient, but fails when sending to internal recipient

I have set up an SPF DNS record for our domain. I've used our external IP address and that seems to be working fine, when I email to external recipients from my Outlook, SPF passes, since the ...
Blaine Sherman's user avatar
1 vote
1 answer
1k views

Azure DNS does not lookup SPF policies for certain domains

I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures. Without going into the security things, today I noticed ...
usr-local-ΕΨΗΕΛΩΝ's user avatar
1 vote
1 answer
4k views

How to build a whitelist of domains we ignore SPF check for in Postfix

My question would seem to be the opposite of How to setup postfix to check SPF record only for domains that i want to check - How would I go about modifying my Postfix server so that it checks SPF ...
davidgo's user avatar
  • 6,292
2 votes
2 answers
13k views

Postfix - Recipient Address Rejected on Incoming Mail Only

I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass. To avoid the email delivery in the spam box of ...
John's user avatar
  • 121
4 votes
1 answer
1k views

Sending email using a third-party smtp requires an mta?

I have a G Suite account and want to use the Google's SMTP to send out emails from my server. How can I then send emails from Linux's CLI? I read with some research that I need a program such as ...
user2923322's user avatar
5 votes
3 answers
573 views

Can MTA send mail via a relay without being told so?

I'm thinking of adding an SPF to a domain. So I'm concerned if there are circumstances under which my MTA would use some relay when sending mail. Like, when the destination servers are too busy or ...
x-yuri's user avatar
  • 2,280
0 votes
3 answers
5k views

SPF setup for mail and relay server

So I am quite new to mail servers and looking for help with setting up SPF properly for this environment: mailserver (IP 11.11.11.11, example.com, random.com, test.com) relay server (IP 22.22.22.22,...
Wooza's user avatar
  • 7
0 votes
1 answer
1k views

spf header information, namely Pass(mailfrom), identity, and receiver=<UNKNOWN>

Is it possible, and how would I go about setting header information for my SPF implementation. It seems to work Ok. I see the SPF header on emails received from different email addresses. However, ...
drexl's user avatar
  • 21
0 votes
1 answer
790 views

Postfix warning: dns_get_fixed

I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing). It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
drexl's user avatar
  • 21
1 vote
1 answer
1k views

SPF errors when sending emails

I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers: mail.mydomain.com - which is on different ip (e.g. 1.1.1.1) ...
Branislav B.'s user avatar
1 vote
1 answer
491 views

You apparently created more than one SPF record on your DNS

I am getting this error from mail tester What we retained as your current SPF record is: v=spf1 include:sparkpostmail.com ~all More information about this error: You apparently created more than ...
Fel's user avatar
  • 1,449
4 votes
1 answer
431 views

SPF - how is it useful if the receiver only verifies the MAIL FROM address?

If I understand correctly, the email receiver checks the validity of the origin of the email by matching the domain's IP of the MAIL FROM (Return-Path) address with the IPs listed in the domain's SPF ...
user2923322's user avatar
0 votes
1 answer
1k views

how to add spf record without ip

I am using a whm server which send default emails to me for any task(cron) executed but recently gmail started blocking my emails for not having spf record. the dns of hostname i am using on server is ...
Rocky73's user avatar
1 vote
2 answers
319 views

Is this correct for a SPF record based on our setup?

Our company has a SMTP server that sends mail out on behalf of our customers. So a customer would log into our system, go to a specific section, and can fill out a form to send an Email to whoever ...
Thorin's user avatar
  • 209
5 votes
2 answers
5k views

`connect to private/policy-spf: No such file or directory` when receive mail by postfix in centos 7

My system is centos 7 with postfix,dovecot,pypolicyd-spf, opendkim. I can send mail but cannot receive mail, I notice warnings as below: Feb 6 20:01:09 srv-8327 postfix/smtpd[20391]: warning: ...
kittygirl's user avatar
  • 965
0 votes
1 answer
1k views

How can I create a DKIM Record?

I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
Isengo's user avatar
  • 133
-1 votes
1 answer
315 views

I have set the DKIM record but my emails is not signed?

I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
Islam Mohamed's user avatar
2 votes
1 answer
367 views

DMARC <policy_evaluated> SPF fails when using PostSRSD

I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To ...
John Doe's user avatar
  • 365
0 votes
1 answer
554 views

Combine 2 spf records into 1

I have 2 spf records for my email example.com The first one is from my hosting provider. I DO send and receive email through my hosting provider. Emails from here do not go to spam. "v=spf1 ?include:...
Mike Meidl's user avatar
-1 votes
1 answer
1k views

SPF record permerror showed in an email header, but no reason for it

Our customers are complaining about the spam issue. There are a number of spam emails which are not tagged as spam emails. These spam emails were sent from forged seneder address, which means our SPF ...
yifan's user avatar
  • 163
1 vote
1 answer
331 views

SPF and Gmail as mail client

I have mail server hosted by some "3rd party provider" (https://www.neoserv.si/) and I want to use Gmail as email client. In Gmail I have set POP3 to copy all incoming messages and IMAP so I can send ...
Matjaž's user avatar
  • 113
1 vote
1 answer
735 views

Spoofing/Spam received from GSuite alias accounts

The company currently have 2 domains registered: "dom1.com" and "dom1.com.ex". "dom1.com" is hosted and is the main domain associated on our GSuite account to create user accounts to send mails, "dom1....
Loki's user avatar
  • 13
0 votes
2 answers
79 views

SPF: Multiple Mailserver

I have a domain with this A record: A 1.2.3.4 And a record for mail like this, I have my mail services at a different hosting provider for exchange. MX mxpool.example.com Now I want to set up a ...
beli3ver's user avatar
  • 145
0 votes
1 answer
42 views

SPF and DMARC protection

Today while working at my company, we saw allot of automatic reply emails coming into one of our group inboxes (i.e. [email protected]). We suspect that this email address is being used in a phishing ...
user92592's user avatar
  • 125
0 votes
1 answer
125 views

Using multiple A-records within one SPF a:name

Let's say my SPF record looks like this: v=spf1 a:spf.example.com -all And the records for spf.example.com look like this: spf.example.com A 12.12.12.12 spf.example.com A 12.42.66.12 spf.example....
Martin's user avatar
  • 123

1
3 4
5
6 7
18