I have a domain whose SPF record looks like this:
"v=spf1 mx ip4:18.104.22.168 -all". The record is valid, and to my understanding implies that allow mails only from:
- The server that is MX record for the domain.
- said ipv4 address: 22.214.171.124
Hard fail on all other mails.
When I send an email to a gmail account, using an ip which is not either of these- the email still reaches my inbox. When I look at the headers, it turns out that google did manage to read my SPF record as I intended it to be, and knew it should have failed, and yet it didn't
fail (google.com: domain of firstname.lastname@example.org does not designate 126.96.36.199 as permitted sender) client-ip=188.8.131.52
Would somebody know what I'm missing here?