Questions tagged [spf]
Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.
886
questions
-1
votes
1
answer
44
views
Phishing email but with SPF, DKIM and DMARC in "PASS" status
I received an email from a company that looked fine. Gmail deemed it ok. I checked the domain and the various DMARC, DKIM and SPF headers: they are all in "PASS" status. The sender's IP also ...
90
votes
3
answers
107k
views
Multiple TXT fields for same subdomain
I would like to understand if multiple TXT records for the same subdomain are ok or could lead to issues. In particular, we have the requirement for one SPF record and one Google Domain Verification ...
19
votes
3
answers
20k
views
SPF include vs redirect
What is the difference?
0
votes
1
answer
153
views
SPF spf.protection.outlook.com is invalid for messages within tenant
When sending mails through our Exchange 365 service those mails get through successfully, but if we look at the mail headers we see that where the sender and recipient are in our tenant the mail's ...
2
votes
2
answers
13k
views
Postfix - Recipient Address Rejected on Incoming Mail Only
I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass.
To avoid the email delivery in the spam box of ...
5
votes
1
answer
589
views
Is email deliverability impossible with a .name email address?
I have a dot name domain. .name is an odd TLD: they originally only offered third level domains, eg first.last.name, so that more people could get their own name. They also included the first@last....
0
votes
1
answer
283
views
Is it a good idea to add `calendar-server.bounces.google.com` to my SPF record?
I'm trying to maximize my company's email deliverability and DMARC reports tell me we are failing DMARC SPF alignment with calendar-server.bounces.google.com which I suspect is the email server ...
0
votes
1
answer
4k
views
550-5.7.26 Unauthenticated email from domain is not accepted due on ERP only
I have made updates to our mail server to use DMARC. So after This our ERP system cannot send emails to gmail.com or yahoo.com but Outlook sends emails with no problems.
Below is the header for an ...
11
votes
4
answers
7k
views
record DKIM on IONOS makes sense?
If I am sending mail through SMTP, I understand that it is IONOS who signs those emails, right?
I would like to add the DKIM header to my emails. I know that it is necessary to publish a CNAME record ...
15
votes
1
answer
7k
views
Change Envelope From to match From header in Postfix
I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "[email protected]" and the Envelope ...
0
votes
1
answer
57
views
Combining 2 Hosts for TXT SPF Records
Related to that question from @Jaeho Lee, Someone figured out a solution for the Host issue when you combined the two spf records? I am having the same issue; if so, can someone please advise?
I have ...
0
votes
1
answer
169
views
Combining 2 SPF records with 2 different host names
I have 2 spf records I need to combine.
1st spf record is:
Host: front-mail Value: v=spf1 include:sendgrid.net ~all
2nd spf record is:
Host: @ Value: v = spf1 include:zoho.jp ~all
I've tried to ...
0
votes
1
answer
180
views
SPF records pass in Gmail sends but show failure in Postmaster
I'm using Sparkpost as the ESP to warm up a secondary domain. We've used this Sparkpost IP for our primary domain for a few months without a problem. I've been tracking the deliverability of the ...
11
votes
2
answers
44k
views
How do I prevent the SPF_HELO_NONE warning when sending from Postfix?
When using a tool like https://dkimvalidator.com/ to verify configuration of DKIM, SPF, DMARC, etc. for sending mail from a web server, I get a warning like this:
0.0 SPF_HELO_NONE SPF: HELO does not ...
0
votes
1
answer
130
views
Why do I need to add third party senders to my domain's SPF record?
It's my understanding that SPF works on the envelope sender/return-path/RFC5321.MailFrom domain. We use a third party email service called Campaign Monitor and their domain has the required SPF record....
0
votes
2
answers
141
views
postfix + spamassassin check SPF from the email headers
I have postfix + spamassassin.
Spamassassin suppose to check the SPF of the sender, but I received following spam:
[email protected] = this is the email on my postfix
Return-Path: <leonah@betterway....
0
votes
2
answers
72
views
Postfix spuriously checks SPF policy for authenticated, submitting mail clients
I am running Postfix 3.8.1 on Ubuntu 23.10. Postfix serves port 25 for incoming mail from other MTAs and port 587 for authenticated MUAs.
Postfix is supposed to check SPF for mails from other MTAs on ...
3
votes
1
answer
1k
views
SPF record in DNS sending via Gmail
I have an old domain that I want to re-purposes for a new website which will send emails. I'm using Asp.Net Core, if that makes a difference (I do not think it does). I've written several apps that ...
0
votes
2
answers
81
views
Should we add SPF records of popular email providers?
DMARC is reporting that a small fraction of our emails originate from google, microsoft, and some other providers.
DMARC is also reporting that a good chunk of those emails fail both SPF and DKIM, and ...
0
votes
0
answers
124
views
DMARC and Postfix delivery reports
I successfully set up DMARC, DKIM and SPF for my mailserver's domain, but delivery reports created by Postfix fail the DKIM/SPF tests.
The headers of regular messages (sent via my mailserver) look ...
3
votes
0
answers
337
views
SPF failure when sending to Google despite server being authenticated
I have encountered this issue several times recently and I've been struggling to confirm the source of the problem.
Most recently, I saw this on a domain that uses Kerio for email. We'll call their ...
0
votes
3
answers
3k
views
Combining multiple SPF records
I am using Yandex Mail and Firebase. I send corporate mails through Yandex and application sends registration, verification, etc. mails through Firebase. Both of them need following SPF records:
v=...
0
votes
0
answers
297
views
Howto Whitelist incoming mails Docker-Mailserver (=Postfix)
I recently set up the Docker-Mailserver for our company (v. 12.1.0). It's working well so far, except for one thing: We receive automated emails from a customer's Redmine system. These emails are not ...
0
votes
2
answers
124
views
A Non-MX mail server + Google Workspace, is this viable?
I have a domain (example.com) configured for sending and receiving mail using Google Workspace. I need to launch additionally a separate (own) mail server. Switching completely to the new server is ...
0
votes
1
answer
462
views
Should HELO, MAILFROM and From use the same domain?
I configured a mail server a couple of times before and I believe back then I thought
that the answer is "yes."
But I'm about to configure another one, and it seems that I was wrong. Let's ...
0
votes
1
answer
127
views
Exchange 2016 returning 550 5.7.1 when sending to our domain using 3rd party email sender sending on behalf of our domain
We have an on-premise Exchange 2016 server. Mail flow is normal. However, recently we started using a 3rd party email service to send out our newsletters (Klaviyo). When we send out campaigns our ...
0
votes
1
answer
115
views
SPF record for multiple mail origins
How do I craft a SPF record for mail.example.com when mail for the domain is sent from two locations:
The mail server located at public IP address 198.51.100.111 aka
mail.example.com.
The web server ...
0
votes
2
answers
464
views
Spammers slipping through SPF
One of the subscribers on the mailhost I run has been receiving scads of spam mail "from himself." With SPF set up and validated on the domain (wickenburg.us) this should not be happening. ...
1
vote
2
answers
253
views
Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?
I have an issue where email is being marked as spam by Gmail/Google Apps systems.
When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
0
votes
0
answers
70
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
1
answer
1k
views
Postfix - can't send emails to gmail addresses via terminal
I have the following errors when trying to send emails to gmail addresses via my terminal:
sudo tail /var/log/mail.log
Jul 19 13:19:44 ubuntu-4gb-fsn1-1 postfix/cleanup[5780]: B4B8C5F4A3: message-id=&...
0
votes
1
answer
777
views
Gmail adds multiple SPF records
When I connected my domain to gmail, it added two records to my DNS:
TXT
@
v=spf1 include:dc-aa8e722993._spfm.mydomainhere.com ~all
TXT
dc-aa8e722993._spfm
v=spf1 include:_spf.google.com ~all
But ...
0
votes
1
answer
102
views
Mail server running on a subdomain - how could email acceptance by other servers be influenced by dns records for different ips?
I started to run a self-hosted mail server which I want to be reachable via a subdomain only. I have an A record for mail.sub.domain.tld and an MX record for sub.domain.tld /edit: which points to mail....
0
votes
1
answer
516
views
SPF records. Allow HELO/EHLO but not sending emails
I have a mail server, let's say mail.example.com
The PTR records connect mail.example.com with my server's ips (ipv4,v6).
The HELO/EHLO response is mail.example.com
Now I want to send letters like ...
0
votes
2
answers
2k
views
How to setup DMARC for both AWS SES and Office 365
I'm trying to get DMARC working for the emails I send via Office 365 as well as Amazon SES. It's working for Office 365 because I setup the SPF and DKIM records in my DNS but it's failing for the ...
0
votes
2
answers
263
views
Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails
I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
0
votes
2
answers
471
views
Gmail reports SPF issues with emails sent from Thunderbird via postfix
This question is similar to the following question in the Mozilla forum. However, the answer given there to this question doesn't address the issue that I am seeing.
Question in Mozilla forum: https://...
1
vote
1
answer
446
views
Is it still possible to use a catch-all email forwarder to gmail, and how?
Since ever, I've been using a catch-all email forwarder at a domain I hold, *@mydomain.net, and sending the email to my personal gmail account, [email protected]. I've just been ousted from my domain ...
6
votes
2
answers
4k
views
Why does spf fail in DMARC report from Google?
I recently received a DMARC report from Google alerting me of a few SPF failures with mail originating from IP addresses belonging to Amazon SES. A sample record is as follows (I have replaced our ...
0
votes
1
answer
179
views
Mail being rejected despite SPF record specifying envelope IP address
I have a mail server with a bridged DSL modem connection; the domain's SPF record looks like this:
"v=spf1 +mx +aa.bb.cc.dd -all"
where the aa.bb.cc.dd is the IP address for my end of the ...
3
votes
1
answer
1k
views
Custom Return-Path for gmail domain
I do not expect my problem to be super-unique, but I was not able to find and answer so far even at Gmail help pages, and lots of googling with various terms did not provided a solution.
Context:
...
0
votes
2
answers
1k
views
SMTP Relay - Keep sender SPF valid
We use a email setup (incoming mails) in the following order:
Internet -> on premises mailserver (=> attachment filter, antivirus, spam filter) -> forward to Microsoft 365 Exchange Online ...
2
votes
2
answers
2k
views
Multiple mail servers and reverse DNS
If I have three mail servers MS1, MS2 and MS3 all with different IPs but share the same domain name (exampledomain.com) and I use an SPF record to specify them, how would reverse DNS work on the ...
1
vote
2
answers
2k
views
Why does DMARC fail for forwarded emails from this particular domain when it passes for all other domains?
I run a virtual mail server that forwards emails to my domain to a Gmail address, and I use PostSRSd to rewrite the addresses. For example, if someone sends an email to [email protected], my mail ...
0
votes
1
answer
394
views
Hotmail does not flag or remove phishing messages from email addresses on a domain with SPF enabled [closed]
The email address of the sender of our newsletter is used for phishing purposes. We do have a valid SPF record (ends with -all) and dmarc on our domain (confirmed by mxtoolbox.com : every checks are ...
1
vote
1
answer
2k
views
postfix: how to force IPv4 through SMTP?
Problem
I have successfully set up a Postfix mailserver with an SMTP interface, set up DKIM, DMARC, SPF, all that stuff.
But I had a problem when testing the delivery of emails to Gmail.
Namely, SPF ...
5
votes
2
answers
1k
views
Does adding another TXT record affect SPF authentication?
I am using multiple mail services for my domain sliver.proteuslake.asia, such as Mailjet, Google, and Atlassian. I have already added three TXT records for my domain:
"v=spf1 include:spf.mailjet....
0
votes
1
answer
364
views
Confused About Why SPF Needs My Email Apps Domain
FYI:
we have a custom domain and we pay for Google Workspace to use that domain for our email/gmail.
i have SPF, DKIM, & DMARC all setup, and a Google tek support person verified it was correct ...
10
votes
4
answers
9k
views
Gmail SPF fail based on client IP
Gmail is failing SPF check based on the client IP. These are the relevant headers:
Received-SPF: fail (google.com: domain of [email protected] does not designate 164.77.240.58 as permitted sender) ...
0
votes
1
answer
165
views
Mail proxy with SPF and DMARC without changing FROM headers
Here is my situation.
We have internal network, with lots of 2nd level subdomains - foo.internal.domain.ltd as example.
Those subdomains may or may not have public DNS records with Class A IPs.
Then, ...