Here is my situation, when I try to send spoofed email of my website like
email@example.com to my gmail account it will be rejected due to DMARC policy.
Here is Undelivered Mail Returned to Sender:
This is the mail system at host emkei.cz. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. Host gmail-smtp-in.l.google.com[126.96.36.199] said: 550-5.7.1 Unauthenticated email from mydomain.com is not accepted due to domain's 550-5.7.1 DMARC policy.
But if I try to send spoofed email of my website to the real address:
firstname.lastname@example.org - the mail will be delivered successfully.
Received: from emkei.cz (emkei.cz [188.8.131.52])
This is my SPF record:
"v=spf1 mx a ip4:myip/32 a:mail.mydomain.com -all"
How can I reject if it's not sended from the same domain?
BTW: I'm running postfix and dovecot.