Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
0
votes
1answer
38 views

SPF record for SMTP server

I am trying to set up my SPF records to take into account that I send emails via office365 directly in Outlook etc. as well as in a web app hosted in AWS which sends email to smtp.office365.com (...
2
votes
2answers
39 views

Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com

I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? ...
0
votes
0answers
33 views

DKIM and SPF for Different Server [duplicate]

My situation like the following: Web server hosted in Google Cloud with domain name lets say: example.com Mail server hosted in Linode (lets say in server name: server.myserver.com) using cPanel with ...
0
votes
2answers
25 views

Postfix mail relay to external address, SPF Check

I have a question which is not about the configuration but about the question what is right and what not. The scenario: Organisation A (OrgA) has a Mailserver which is responsible for example.org. ...
0
votes
0answers
30 views

Setting up a new network at new office

We have a small online/tech office of about 50 local employees (2 small international offices, with another 20 people). Almost all of our activities are done through either Google or AWS, so while we ...
4
votes
1answer
129 views

Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?

I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
3
votes
1answer
52 views

SPF: Is ?all safe, and is it any different from having no policy at all?

A company I started working with had no SPF records on their domain. They are using multiple services (Google Apps and Shopify) that are sending e-mails from the company's domain with the company's ...
0
votes
2answers
50 views

Which IP is SPF checks checked against

I am trying to work out which IP to put into an SPF record. I understand that SPF will extract the domain from return-path, So i guess SPF check will then do a DNS lookup to find the SPF record for ...
1
vote
1answer
38 views

Join multiple SPF in one string

I've read other thread about it but I've 2 different string with some parameters in only one (MX) so i ask some help to join in one string only in the correct way. 1) "v=spf1 include:spf.sendinblue....
0
votes
0answers
12 views

Not allowed to use one of my sender email addresses [duplicate]

I use mail-tester.com to test my email sending health. I can't solve the issue where [SPF] mydomain.com does not allow your server 104.254.129.4 to use info@mydomain.com I have removed every single ...
0
votes
1answer
43 views

How did this pass DKIM according to DMARC report?

I recently added a DMARC record for one of my domains. Let's call it mydomain.com: v=DMARC1;p=none;rua=mailto:dmarc_reports@mydomain.com;ruf=mailto:dmarc_reports@mydomain.com;fo=1" I have been ...
0
votes
1answer
30 views

DKIM & SPF records should be on the sender email domain or on the smtp domain?

I have two(2) vps servers. One of them hosts my website and the other has Postfix installed on it. VPS[1]: websitedomain.com VPS[2]: postfixdomain.com I am using smtp.postfixdomain.com to send an ...
0
votes
2answers
70 views

Further understanding of SPF, DKIM, and DMARC

I've been trying to wrap my head around some of the information I've gathered online, and I was hoping for some clarification. We are using Office 365, for our email server. A.) Are SPF records and ...
0
votes
1answer
41 views

Proper SPF record

Our company emails are usually treated as spam. When we checked our score on Spamassassin, our score was pretty bad, 3.3 and the main reason was our SPF record. We would like to update our SPF record ...
0
votes
1answer
25 views

Make my outgoing SPF records strict, and incoming policy lenient (postfix/dovecot)

I recently added an SPF record to my DNS records, so my email is less likely to be marked as spam. My SPF record looks like this: mpn.co. 86400 IN TXT "v=spf1 ip4:45.56.81.114 ip6:2600:...
-1
votes
2answers
157 views

How to read this DMARC report? Why does Yahoo still reject mails from my server?

I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on ...
1
vote
1answer
46 views

Gsuite DMARC SPF Setup Failure

I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC ...
0
votes
2answers
36 views

Emails fail DMARC check despite having the sender IP in SPF

I have the following DMARC record set up: v=DMARC1; p=none; rua=mailto:rua@mydomain.com; ruf=mailto:ruf@mydomain.com; sp=none; fo=0:1:d:s I have the following SPF record set up: v=spf1 mx -all the ...
0
votes
1answer
58 views

dmarc. Why do I receive failed SPF or DKIM authentication reports for forwarders?

I set _dmarc to see my email authentication reports (in case it fails). like that "v=DMARC1;p=quarantine;pct=100;rua=mailto:dmarcreports@example.com" And I receive these reports form Google. a ...
1
vote
2answers
73 views

SPF authentication mixed pass/fail without SPF record, in DMARC report [duplicate]

I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows ...
0
votes
0answers
38 views

Mail issues only with Google App domains

I have a local mail server set up. It is connected via a dedicated IP (with an appropriate PTR record). I have DKIM, DMARC, and SPF set up. My domain has been added to Google's Postmaster Tools and ...
1
vote
1answer
87 views

SPF record longer than 255 characters in AWS Route53

I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
-1
votes
2answers
83 views

SPF records for a company with traveling (or remote) employees

I'm trying to set up a SPF record for the domain of a company whose employees use all sorts of SMTP servers.. But I think that line already contradicts itself ? Is this a problem ? They use several ...
1
vote
1answer
41 views

How to build “SPF” ( multiple IPs) for authorizing other domains for sending mails behalf of them

We are building mail server to send mails for other domains. We have multiple IP address and i have created "A" record like spf.example.com pointing to multiple IP's Now I have asked client to ...
1
vote
1answer
73 views

SPF passes when sending email to external recipient, but fails when sending to internal recipient

I have set up an SPF DNS record for our domain. I've used our external IP address and that seems to be working fine, when I email to external recipients from my Outlook, SPF passes, since the ...
1
vote
1answer
51 views

Azure DNS does not lookup SPF policies for certain domains

I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures. Without going into the security things, today I noticed ...
0
votes
1answer
89 views

How to build a whitelist of domains we ignore SPF check for in Postfix

My question would seem to be the opposite of How to setup postfix to check SPF record only for domains that i want to check - How would I go about modifying my Postfix server so that it checks SPF ...
1
vote
1answer
317 views

Postfix - Recipient Address Rejected on Incoming Mail Only

I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass. To avoid the email delivery in the spam box of ...
1
vote
1answer
114 views

Sending email using a third-party smtp requires an mta?

I have a G Suite account and want to use the Google's SMTP to send out emails from my server. How can I then send emails from Linux's CLI? I read with some research that I need a program such as ...
5
votes
3answers
465 views

Can MTA send mail via a relay without being told so?

I'm thinking of adding an SPF to a domain. So I'm concerned if there are circumstances under which my MTA would use some relay when sending mail. Like, when the destination servers are too busy or ...
0
votes
3answers
294 views

SPF setup for mail and relay server

So I am quite new to mail servers and looking for help with setting up SPF properly for this environment: mailserver (IP 11.11.11.11, example.com, random.com, test.com) relay server (IP 22.22.22.22,...
0
votes
1answer
308 views

spf header information, namely Pass(mailfrom), identity, and receiver=<UNKNOWN>

Is it possible, and how would I go about setting header information for my SPF implementation. It seems to work Ok. I see the SPF header on emails received from different email addresses. However, ...
-1
votes
1answer
83 views

Postfix warning: dns_get_fixed

I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing). It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
1
vote
1answer
73 views

SPF errors when sending emails

I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers: mail.mydomain.com - which is on different ip (e.g. 1.1.1.1) ...
0
votes
1answer
97 views

You apparently created more than one SPF record on your DNS

I am getting this error from mail tester What we retained as your current SPF record is: v=spf1 include:sparkpostmail.com ~all More information about this error: You apparently created more than ...
4
votes
1answer
102 views

SPF - how is it useful if the receiver only verifies the MAIL FROM address?

If I understand correctly, the email receiver checks the validity of the origin of the email by matching the domain's IP of the MAIL FROM (Return-Path) address with the IPs listed in the domain's SPF ...
0
votes
0answers
101 views

how to add spf record without ip

I am using a whm server which send default emails to me for any task(cron) executed but recently gmail started blocking my emails for not having spf record. the dns of hostname i am using on server is ...
0
votes
0answers
120 views

Office 365 Message Tracking on Authentication-Results: spf=fail

I would like to modify my Office 365 spamfilter to mark all messages with Authentication-Results: spf=fail as spam. Before I enable this, I would like to receive an overview of all mails that have ...
1
vote
2answers
295 views

Is this correct for a SPF record based on our setup?

Our company has a SMTP server that sends mail out on behalf of our customers. So a customer would log into our system, go to a specific section, and can fill out a form to send an Email to whoever ...
3
votes
1answer
555 views

`connect to private/policy-spf: No such file or directory` when receive mail by postfix in centos 7

My system is centos 7 with postfix,dovecot,pypolicyd-spf, opendkim. I can send mail but cannot receive mail, I notice warnings as below: Feb 6 20:01:09 srv-8327 postfix/smtpd[20391]: warning: ...
0
votes
0answers
36 views

If mail from “me” isn't DKIM signed, reject it

I am getting DMARC reports stating that an unauthorized IP is claiming to be me (our domain is in the headers). Looking at this section of the DMARC report, it occurs to me that I should be able to ...
0
votes
1answer
101 views

How can I create a DKIM Record?

I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
-1
votes
1answer
69 views

I have set the DKIM record but my emails is not signed?

I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
0
votes
0answers
24 views

SPF record equals pass but why, it should not?

I am struggling here to find a solution to allow real sender through but block the spoofed emails. Here is the SPF record: https://tools.sparkpost.com/spf/inspector/catholicdioceseofwichita.org Can ...
0
votes
1answer
39 views

DMARC <policy_evaluated> SPF fails when using PostSRSD

I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To ...
0
votes
1answer
27 views

Combine 2 spf records into 1

I have 2 spf records for my email example.com The first one is from my hosting provider. I DO send and receive email through my hosting provider. Emails from here do not go to spam. "v=spf1 ?include:...
-1
votes
1answer
130 views

SPF record permerror showed in an email header, but no reason for it

Our customers are complaining about the spam issue. There are a number of spam emails which are not tagged as spam emails. These spam emails were sent from forged seneder address, which means our SPF ...
1
vote
1answer
60 views

SPF and Gmail as mail client

I have mail server hosted by some "3rd party provider" (https://www.neoserv.si/) and I want to use Gmail as email client. In Gmail I have set POP3 to copy all incoming messages and IMAP so I can send ...
1
vote
1answer
113 views

Spoofing/Spam received from GSuite alias accounts

The company currently have 2 domains registered: "dom1.com" and "dom1.com.ex". "dom1.com" is hosted and is the main domain associated on our GSuite account to create user accounts to send mails, "dom1....
0
votes
2answers
50 views

SPF: Multiple Mailserver

I have a domain with this A record: A 1.2.3.4 And a record for mail like this, I have my mail services at a different hosting provider for exchange. MX mxpool.example.com Now I want to set up a ...