I have the following DMARC record set up:
v=DMARC1; p=none; rua=mailto:rua@mydomain.com; ruf=mailto:ruf@mydomain.com; sp=none; fo=0:1:d:s
I have the following SPF record set up:
v=spf1 mx -all
the MX record has 3 IP addresses.
One of those IP Addresses in the MX record is used to send emails from. Majority of those emails align with DMARC well (last month, 312k emails are aligned). However, the same IP Address also shows some failure reports (700 emails failed DMARC).
When I look at the reason, it says "mail.mydomain.com" -- SPF not set.
My DMARC record is set to be in relaxed mode (emails from subdomains pass the DMARC check).
What could be the reason for those emails to fail? How can I avoid this? Should I add an SPF record under mail.mydomain.com subdomain?
v=spf1 redirect=example.com
(the=
is not a typo and redirect do not need anall
.) Provided the subdomain has no other text records it will resolve and redirect. Keep in mind redirects count as a lookup so your primary record can never exceed 9/10 or your subdomains will error on max lookups.