Questions tagged [spf]
Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.
892
questions
1
vote
1
answer
911
views
DMARC Report: Sometimes DKIM Fails for Mail Server IP
What does it mean when some DMARC records indicate a failure for the correct server:
<record>
<row>
<source_ip>1.2.3.4</source_ip>
<count>8</count&...
1
vote
1
answer
1k
views
SPF and IPv6 fails even if the reverse DNS is created
When sending mails to Gmail I get this error
Received-SPF: fail (google.com: domain of [email protected] does not
designate 2a01:4f8:xxx::2 as permitted sender)
client-ip=2a01:4f8:xxx::2;
When I ...
0
votes
0
answers
601
views
everything Pass but emails still go to the spam folder! I think it would be about hostname but not sure and don't know how to fix this
I checked too many topics and answers tested too many things! but can't find a solution to my problem. I'm a newbie user and maybe didn't understand some answers well.
I need to fix this problem as ...
0
votes
2
answers
1k
views
SPF record for SMTP server
I am trying to set up my SPF records to take into account that I send emails via office365 directly in Outlook etc. as well as in a web app hosted in AWS which sends email to smtp.office365.com (...
2
votes
3
answers
4k
views
Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com
I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? ...
0
votes
0
answers
36
views
DKIM and SPF for Different Server [duplicate]
My situation like the following:
Web server hosted in Google Cloud with domain name lets say: example.com
Mail server hosted in Linode (lets say in server name: server.myserver.com) using cPanel with ...
0
votes
2
answers
828
views
Postfix mail relay to external address, SPF Check
I have a question which is not about the configuration but about the question what is right and what not.
The scenario:
Organisation A (OrgA) has a Mailserver which is responsible for example.org. ...
6
votes
2
answers
1k
views
Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?
I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
3
votes
1
answer
190
views
SPF: Is ?all safe, and is it any different from having no policy at all?
A company I started working with had no SPF records on their domain. They are using multiple services (Google Apps and Shopify) that are sending e-mails from the company's domain with the company's ...
0
votes
2
answers
154
views
Which IP is SPF checks checked against
I am trying to work out which IP to put into an SPF record. I understand that SPF will extract the domain from return-path, So i guess SPF check will then do a DNS lookup to find the SPF record for ...
1
vote
1
answer
452
views
Join multiple SPF in one string
I've read other thread about it but I've 2 different string with some parameters in only one (MX) so i ask some help to join in one string only in the correct way.
1) "v=spf1 include:spf.sendinblue....
0
votes
1
answer
569
views
How did this pass DKIM according to DMARC report?
I recently added a DMARC record for one of my domains. Let's call it mydomain.com:
v=DMARC1;p=none;rua=mailto:[email protected];ruf=mailto:[email protected];fo=1"
I have been ...
1
vote
1
answer
107
views
DKIM & SPF records should be on the sender email domain or on the smtp domain?
I have two(2) vps servers. One of them hosts my website and the other has Postfix installed on it.
VPS[1]: websitedomain.com
VPS[2]: postfixdomain.com
I am using smtp.postfixdomain.com to send an ...
0
votes
2
answers
750
views
Further understanding of SPF, DKIM, and DMARC
I've been trying to wrap my head around some of the information I've gathered online, and I was hoping for some clarification.
We are using Office 365, for our email server.
A.) Are SPF records and ...
0
votes
1
answer
4k
views
Proper SPF record
Our company emails are usually treated as spam. When we checked our score on Spamassassin, our score was pretty bad, 3.3 and the main reason was our SPF record.
We would like to update our SPF record ...
1
vote
1
answer
546
views
Make my outgoing SPF records strict, and incoming policy lenient (postfix/dovecot)
I recently added an SPF record to my DNS records, so my email is less likely to be marked as spam.
My SPF record looks like this:
mpn.co. 86400 IN TXT "v=spf1 ip4:45.56.81.114 ip6:2600:...
2
votes
2
answers
8k
views
How to read this DMARC report? Why does Yahoo still reject mails from my server?
I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on ...
1
vote
1
answer
961
views
Gsuite DMARC SPF Setup Failure
I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC ...
0
votes
2
answers
875
views
Emails fail DMARC check despite having the sender IP in SPF
I have the following DMARC record set up:
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; fo=0:1:d:s
I have the following SPF record set up:
v=spf1 mx -all
the ...
0
votes
1
answer
654
views
dmarc. Why do I receive failed SPF or DKIM authentication reports for forwarders?
I set _dmarc to see my email authentication reports (in case it fails).
like that
"v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected]"
And I receive these reports form Google.
a ...
1
vote
2
answers
1k
views
SPF authentication mixed pass/fail without SPF record, in DMARC report [duplicate]
I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows ...
0
votes
0
answers
322
views
Mail issues only with Google App domains
I have a local mail server set up. It is connected via a dedicated IP (with an appropriate PTR record). I have DKIM, DMARC, and SPF set up.
My domain has been added to Google's Postmaster Tools and ...
1
vote
1
answer
2k
views
SPF record longer than 255 characters in AWS Route53
I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
0
votes
2
answers
417
views
SPF records for a company with traveling (or remote) employees
I'm trying to set up a SPF record for the domain of a company whose employees use all sorts of SMTP servers..
But I think that line already contradicts itself ? Is this a problem ?
They use several ...
1
vote
1
answer
963
views
How to build "SPF" ( multiple IPs) for authorizing other domains for sending mails behalf of them
We are building mail server to send mails for other domains.
We have multiple IP address and i have created "A" record like spf.example.com pointing to multiple IP's
Now I have asked client to ...
1
vote
1
answer
816
views
SPF passes when sending email to external recipient, but fails when sending to internal recipient
I have set up an SPF DNS record for our domain. I've used our external IP address and that seems to be working fine, when I email to external recipients from my Outlook, SPF passes, since the ...
1
vote
1
answer
1k
views
Azure DNS does not lookup SPF policies for certain domains
I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures.
Without going into the security things, today I noticed ...
1
vote
1
answer
4k
views
How to build a whitelist of domains we ignore SPF check for in Postfix
My question would seem to be the opposite of How to setup postfix to check SPF record only for domains that i want to check -
How would I go about modifying my Postfix server so that it checks SPF ...
2
votes
2
answers
13k
views
Postfix - Recipient Address Rejected on Incoming Mail Only
I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass.
To avoid the email delivery in the spam box of ...
4
votes
1
answer
1k
views
Sending email using a third-party smtp requires an mta?
I have a G Suite account and want to use the Google's SMTP to send out emails from my server.
How can I then send emails from Linux's CLI? I read with some research that I need a program such as ...
5
votes
3
answers
573
views
Can MTA send mail via a relay without being told so?
I'm thinking of adding an SPF to a domain. So I'm concerned if there are circumstances under which my MTA would use some relay when sending mail. Like, when the destination servers are too busy or ...
0
votes
3
answers
5k
views
SPF setup for mail and relay server
So I am quite new to mail servers and looking for help with setting up SPF properly for this environment:
mailserver (IP 11.11.11.11, example.com, random.com, test.com)
relay server (IP 22.22.22.22,...
0
votes
1
answer
1k
views
spf header information, namely Pass(mailfrom), identity, and receiver=<UNKNOWN>
Is it possible, and how would I go about setting header information for my SPF implementation.
It seems to work Ok. I see the SPF header on emails received from different email addresses. However, ...
0
votes
1
answer
790
views
Postfix warning: dns_get_fixed
I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing).
It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
1
vote
1
answer
1k
views
SPF errors when sending emails
I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers:
mail.mydomain.com - which is on different ip (e.g. 1.1.1.1)
...
1
vote
1
answer
491
views
You apparently created more than one SPF record on your DNS
I am getting this error from mail tester
What we retained as your current SPF record is:
v=spf1 include:sparkpostmail.com ~all
More information about this error:
You apparently created more than ...
4
votes
1
answer
431
views
SPF - how is it useful if the receiver only verifies the MAIL FROM address?
If I understand correctly, the email receiver checks the validity of the origin of the email by matching the domain's IP of the MAIL FROM (Return-Path) address with the IPs listed in the domain's SPF ...
0
votes
1
answer
1k
views
how to add spf record without ip
I am using a whm server which send default emails to me for any task(cron) executed but recently gmail started blocking my emails for not having spf record.
the dns of hostname i am using on server is ...
1
vote
2
answers
319
views
Is this correct for a SPF record based on our setup?
Our company has a SMTP server that sends mail out on behalf of our customers. So a customer would log into our system, go to a specific section, and can fill out a form to send an Email to whoever ...
5
votes
2
answers
5k
views
`connect to private/policy-spf: No such file or directory` when receive mail by postfix in centos 7
My system is centos 7 with postfix,dovecot,pypolicyd-spf, opendkim.
I can send mail but cannot receive mail,
I notice warnings as below:
Feb 6 20:01:09 srv-8327 postfix/smtpd[20391]: warning: ...
0
votes
1
answer
1k
views
How can I create a DKIM Record?
I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
-1
votes
1
answer
315
views
I have set the DKIM record but my emails is not signed?
I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
2
votes
1
answer
367
views
DMARC <policy_evaluated> SPF fails when using PostSRSD
I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To ...
0
votes
1
answer
554
views
Combine 2 spf records into 1
I have 2 spf records for my email example.com
The first one is from my hosting provider. I DO send and receive email through my hosting provider. Emails from here do not go to spam.
"v=spf1 ?include:...
-1
votes
1
answer
1k
views
SPF record permerror showed in an email header, but no reason for it
Our customers are complaining about the spam issue. There are a number of spam emails which are not tagged as spam emails. These spam emails were sent from forged seneder address, which means our SPF ...
1
vote
1
answer
331
views
SPF and Gmail as mail client
I have mail server hosted by some "3rd party provider" (https://www.neoserv.si/) and I want to use Gmail as email client. In Gmail I have set POP3 to copy all incoming messages and IMAP so I can send ...
1
vote
1
answer
735
views
Spoofing/Spam received from GSuite alias accounts
The company currently have 2 domains registered: "dom1.com" and "dom1.com.ex". "dom1.com" is hosted and is the main domain associated on our GSuite account to create user accounts to send mails, "dom1....
0
votes
2
answers
79
views
SPF: Multiple Mailserver
I have a domain with this A record:
A 1.2.3.4
And a record for mail like this, I have my mail services at a different hosting provider for exchange.
MX mxpool.example.com
Now I want to set up a ...
0
votes
1
answer
42
views
SPF and DMARC protection
Today while working at my company, we saw allot of automatic reply emails coming into one of our group inboxes (i.e. [email protected]). We suspect that this email address is being used in a phishing ...
0
votes
1
answer
125
views
Using multiple A-records within one SPF a:name
Let's say my SPF record looks like this:
v=spf1 a:spf.example.com -all
And the records for spf.example.com look like this:
spf.example.com A 12.12.12.12
spf.example.com A 12.42.66.12
spf.example....