Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

121 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
15 votes
1 answer
7k views

Change Envelope From to match From header in Postfix

I am using Postfix as a gateway for my domain and need it to change or rewrite the Envelope From address to match the From header. For example, the From: header is "[email protected]" and the Envelope ...
lid's user avatar
  • 285
4 votes
0 answers
988 views

Postfix failed SPF check

I'm using postfix to send mail from my own domain and postfix-policyd-spf-perl to check SPF. SPF check fail only when I send an email from my own domain to my own domain. In summary : mydomain -> ...
Quentin Revel's user avatar
4 votes
0 answers
924 views

Sendmail on CentOS 6, with SRS

I do some mail forwarding, but I'm also a big fan of SPF; I'm aware that I have a problem. While my mail server was running Centos5, I was using pysrs as a milter, and it worked well - but it hasn't ...
MadHatter's user avatar
  • 80.5k
3 votes
0 answers
337 views

SPF failure when sending to Google despite server being authenticated

I have encountered this issue several times recently and I've been struggling to confirm the source of the problem. Most recently, I saw this on a domain that uses Kerio for email. We'll call their ...
Charlie Patton's user avatar
3 votes
0 answers
776 views

Set SPF to send email using Gmail

(Disclaimer: I totally suck at being a sysadmin) I am sending email for a domain using Gmail. The domain is partyboatcharters.com.au (I hope I am allowed to put domains here). Gmail is configured to ...
Merc's user avatar
  • 807
3 votes
0 answers
776 views

SFP + Gmail = Emails delivered to spam box

A long time ago I posted a question here: Postfix: Gmail marking my email as spam where I said that although emails send from my servers were passing all the DKIM and SPF tests they were getting ...
TCB13's user avatar
  • 1,238
2 votes
0 answers
684 views

Google G Suite DMARC + SPF + DKIM for user domain aliases fail Google Admin Toolbox CheckMX

I have set up the above in my Google's old G-Suite account for a User Domain Alias but am still getting two warning messages: https://webcoder.co.uk There were some non-critical problems detected with ...
webcoder.co.uk's user avatar
2 votes
0 answers
2k views

With valid SPF, DKIM, and DMAR, Office 365 email still goes to junk mail and got Authentication-Results-Original: spf=none

My goal is to be able to send email from my website using smtp.office365.com and the emails will go into inbox instead of junk mail. But so far, I have not succeed. If the receipt is gmail, the ...
flyingcrane's user avatar
2 votes
0 answers
545 views

How to avoid gmail orange mark and spam filter when using cloudflare proxies?

I send emails from my site via php smtp method connected to 'smtp.gmail.com' on 465, and account added to GSuite. All my emails falls in spam folder in Gmail. The kind of emails is just password ...
Valik Tralik's user avatar
2 votes
2 answers
13k views

Postfix - Recipient Address Rejected on Incoming Mail Only

I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass. To avoid the email delivery in the spam box of ...
John's user avatar
  • 121
2 votes
1 answer
2k views

DMARC fails on forwarded mails without DKIM

I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and ...
user3298489's user avatar
2 votes
0 answers
790 views

Difficulty with second domain in an SPF Record (not allowed use email addy)

I'm kinda out of my element here so please forgive me. I have read and googled several spf post and troubleshooting tips but I can't quite figure out what I'm missing. My test email is failing ...
GPGVM's user avatar
  • 121
2 votes
1 answer
2k views

SPF record not being detected by gmail

I recently added SPF record to my server & it passes all the results required. However sending email doesn't detect SPF record. The method I use to detect is whether gmail shows 'mailed-by'. I ...
Guy in the chair's user avatar
1 vote
0 answers
163 views

SPF Limits and SPF Merging

I am using Zoho Mail, AWS SES, GMAIL SMTP, Cloudflare email route and Yahoo SMTP. they all have there own SPF record. i saw on Google the only 1 SPF should be added in hostname and maximum 10 SPF ...
Mehul Kumar's user avatar
1 vote
1 answer
3k views

SPF Error - Cannot send emails to @gmail users

I get the following error, every time I tried to send an email to a gmail user. Error:"This is the mail system at host chimaera.otenet.gr. I'm sorry to have to inform you that your message could ...
Geo_G's user avatar
  • 11
1 vote
2 answers
610 views

Managing DNS lookup limit of SPF for a domain with many sending email services

I am webmastering for a sports association, and I would need to set up SPF records for the club's domain. However, I'm exceeding the 10 lookup limit, and would need guidance how to best resolve the ...
Joel Lehikoinen's user avatar
1 vote
0 answers
117 views

Postfix after-queue content filter

I am running a postfix/dovecot/spamassassin/clamav system on Debian 10 with Postfix 3.5.13 for my domains. One domain has a small private mailing list. If someone writes to the list postfix prepends ...
Leisniger's user avatar
1 vote
2 answers
211 views

Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?

Pretty new to spf/dkim and dmark. After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
John's user avatar
  • 897
1 vote
0 answers
502 views

520 ip and spf record not match

We are using Google Workspace and set Email forwarding using recipient address map to forward messages at our domain name (@example.com) to an external domain name (@external.com). Ex. mail sent to ...
user1822824's user avatar
1 vote
0 answers
2k views

How to configure EXIM to check SPF record for incoming emails and add 'Received SPF' header to the incoming emails?

I'm playing with Exim and created a mail server that can accept and send emails alright. Now, I want to enable SPF checking for every incoming email so that a Received SPF header is added to these ...
Md. Ishtiaq Ashiq Khan's user avatar
1 vote
1 answer
217 views

SPF/DKIM and sending emails from parent domain

I'm trying to understand how apps such as greenhouse.io configure DNS for delegating email sending. In short, assume I am a SAAS provider saas.com and my customer is customer.com. I've seen that it is ...
ragebiswas's user avatar
1 vote
0 answers
944 views

SPF neutral on mail sent with SMTP from Gmail. SPF pass on mail sent from inbox for that address on G Suite

The domain name I'm trying to debug is dallaspetsalive.org. This is a G Suite domain. When I log directly into my G Suite email account for the dallaspetsalive.org address and send an email, I get SPF ...
Katie Patterson's user avatar
1 vote
1 answer
779 views

Why is opendmarc SPF failing this arriving message?

Why is this incoming message failing? postfix/smtpd[4776]: connect from mail-mw2nam10on2073.outbound.protection.outlook.com[40.107.94.73] postfix/smtpd[4776]: Anonymous TLS connection established ...
Andrew's user avatar
  • 145
1 vote
1 answer
708 views

Postfix send mail only to GMail, all other domains are deferred and not sended

My Postfix server is running on Debian Stretch. It is able to send emails to a GMail address without problems which are not considered as spam. At the DNS level I configured DKIM, SPF and DMARC and ...
Zetam's user avatar
  • 11
1 vote
0 answers
3k views

DKIM failure "message has been altered"

Summary I have a Mattermost server which needs to send emails out to users when they sign up, etc. These emails are failing DKIM checks and showing up in users' Gmail as spam. Observed behavior I ...
wesgardner's user avatar
1 vote
1 answer
537 views

Make my outgoing SPF records strict, and incoming policy lenient (postfix/dovecot)

I recently added an SPF record to my DNS records, so my email is less likely to be marked as spam. My SPF record looks like this: mpn.co. 86400 IN TXT "v=spf1 ip4:45.56.81.114 ip6:2600:...
3x5's user avatar
  • 121
1 vote
1 answer
959 views

Gsuite DMARC SPF Setup Failure

I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC ...
AudRE's user avatar
  • 11
1 vote
0 answers
1k views

What is wrong with this e-mail which is failing SPF(mailfrom) and DMARC?

This is a follow-up from "Why is my opendmarc failing pretty much everything that comes through?". I'm really struggling to understand what is going on. Outgoing mail is verified correctly by the ...
Morpheu5's user avatar
  • 269
1 vote
0 answers
254 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
ninjasense's user avatar
1 vote
0 answers
2k views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
ThinCrustItalianPizza's user avatar
1 vote
1 answer
196 views

How to setup SPF and DMARC for satellite hosts?

If I send mail directly from relay host - everything works like a charm. All checks are passed. Delivered-To: [email protected] Received: by 10.100.182.171 with SMTP id t40csp2626933pjb; Thu, 26 ...
Falseclock's user avatar
1 vote
0 answers
986 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
user1998000's user avatar
1 vote
1 answer
2k views

DMARC and RFC2298 compliant MDNs with a null MailFrom... Can it work?

This is an issue we're seeing with Exchange Online but it would be an issue with most hosted email I suspect. When Office 365 / Exchange Online sends an automatic reply (Out of Office for example) it ...
omniomi's user avatar
  • 123
1 vote
0 answers
112 views

MTA (postfix) failing on one domain relay of a dual domain config

I want MTA to send emails from 2 domains, issues by same server. eEmail is sending from one domain, but failing from the other. My app server generates smtp email as either mydomain.com or ...
David Shields's user avatar
1 vote
0 answers
133 views

Sending alert emails from a bunch of servers to G Suite

We have a always changing infrastructure (DigitalOcean droplets and AWS EC2 instances that are created and deleted). We use Ansible to bootstrap VMs and to install netdata on each VM. The goal is to ...
Elisiário Couto's user avatar
1 vote
0 answers
117 views

FCrDNS for a mail server that also runs other services (http, ftp etc)

I am learning how to administer productive internet-facing machines and services, and towards that end setting up mail, web, and a couple other services, all on the same box (budget constraints and ...
ArjunShankar's user avatar
1 vote
0 answers
159 views

New Exchanger Server installation - Email marked as spam on hotmail/outlook

New to the email hosting scene - running an Exchange 2013 box. Email is always (literally, always) marked as spam when sending out to my outlook.com account. Whereas if its sent to an email address ...
FoolishlyWise's user avatar
1 vote
0 answers
2k views

SMTP error : Remote host said: 550 5.7.1 At least one FROM header address not allowed to send mail from IP ADDRESS

We are developing an email sending app, and we allow our users to specify the From: header their emails will be sent from. Let's say our domain is mydomain.com and our client domain is clientdomain....
MaxiWheat's user avatar
  • 237
1 vote
1 answer
92 views

Originating (non-critical) emails from a "less-trusted" host

Background We have a webapp running on webapp.example.com that (amongst other things) sends messages by email from time to time. These messages are non-critical: whilst we would like to make a best ...
eggyal's user avatar
  • 412
1 vote
1 answer
720 views

gmail contacts IP from SPF and fails to send mail to some domains

I have strange problem with my SPF records and gmail MX. I have this SPF setup v=spf1 a mx ip4:IP1 ip4:IP2 include:_spf.google.com ~all In this case, if I send an email to two specific domains, ...
titus's user avatar
  • 414
1 vote
0 answers
879 views

SRS + SPF for Exchange Server

Is there a specific way to enable SRS on Exchange, or a similar function, on a SPF enabled domain? I have a SPF Record set to ~all, and noticed that out of office (OOO) emails are failing due to them ...
user156783's user avatar
1 vote
1 answer
336 views

SPF and DMARC - how is the SPF policy used

My domain has a strict DMARC policy (p=reject) and a standard SPF policy with ~all catchall. My email provider is Google Workspace. I received an email spoofing my sender address. It came from 41.174....
chutz's user avatar
  • 7,990
1 vote
1 answer
4k views

SPF blocking some emails. How to complete disable it?

We have configured a SMTP server on IIS. We have not configured any SPF rule. Some emails are going straight to the badmail folder. Most of them have this error message: Address does not pass the ...
Rafael Colucci's user avatar
0 votes
1 answer
130 views

Why do I need to add third party senders to my domain's SPF record?

It's my understanding that SPF works on the envelope sender/return-path/RFC5321.MailFrom domain. We use a third party email service called Campaign Monitor and their domain has the required SPF record....
jamieburchell's user avatar
0 votes
0 answers
124 views

DMARC and Postfix delivery reports

I successfully set up DMARC, DKIM and SPF for my mailserver's domain, but delivery reports created by Postfix fail the DKIM/SPF tests. The headers of regular messages (sent via my mailserver) look ...
janeden's user avatar
  • 257
0 votes
0 answers
297 views

Howto Whitelist incoming mails Docker-Mailserver (=Postfix)

I recently set up the Docker-Mailserver for our company (v. 12.1.0). It's working well so far, except for one thing: We receive automated emails from a customer's Redmine system. These emails are not ...
mmytx's user avatar
  • 1
0 votes
0 answers
70 views

Change mail from header in sendmail

We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail. We are trying to configure now SPF and DMARC records for these DNS ...
Julia Mala's user avatar
0 votes
2 answers
263 views

Changing SPF record from ~all to -all where employee inboxes are with Google and Amazon SES is used for website transactional emails

I'm interested in moving from ~all to -all in my SPF record in order to lock down my domain emails a bit more, but I want to know what the impacts might be (I do understand at ~ is SOFTFAIL and - is ...
sdek's user avatar
  • 165
0 votes
1 answer
516 views

SPF records. Allow HELO/EHLO but not sending emails

I have a mail server, let's say mail.example.com The PTR records connect mail.example.com with my server's ips (ipv4,v6). The HELO/EHLO response is mail.example.com Now I want to send letters like ...
Роман Коптев's user avatar
0 votes
1 answer
321 views

SPF-record for domain vs. sub-domain

For historical reasons my e-mail address uses a subdomain: [email protected]. My sending (and receiving) servers are completely different from those of the top-level example.com itself. Recently, the ...
Mikhail T.'s user avatar
  • 2,377