Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

0
votes
0answers
15 views

Using OpenDMARC's SPFSelfValidate option to perform SPF check

OpenDMARC has a SPFSelfValidate option described as following in the man page: Causes the filter to perform a fallback SPF check itself when it can find no SPF results in the message header. If ...
1
vote
2answers
22 views

Multiple SPF entries in same or separate TXT records

I want to use a mass mailing service, e.g. sendgrid, mailgun, etc. And so I must update my zone file to include the correct SPF records. Suppose my domain is example.com. My DNS provider ...
1
vote
1answer
34 views

Can I bypass SPF restrictions by using an SMTP envelope FROM with another domain that has either no SPF record or an invalid one

Consider DMARC record: v=DMARC1;p=reject;rua=mailto:xyz;ruf=mailto:xyz;adkim=s;aspf=s;pct=100;fo=1;sp=reject Also consider domain example.com with a TXT record: v=spf1 include:_spf.google.com -...
3
votes
1answer
33 views

Once SPF is correctly setup is it normal for spoofed email to go to spam folder or should Gmail deleted them?

In the spam folder of Gmail can be found illegitimate spam emails apparently sent from my own domain email address but from an origin not allowed by SPF. The domain is on G Suite emails. SPF is ...
-1
votes
1answer
51 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
0
votes
0answers
38 views

SPF fail vs. soft-fail pros and cons

Question What are the advantages and disadvantages of using Fail vs. a SoftFail in my SPF record? What I found on the topic Back in 2007, knowledgeable-seeming folks seem to have said SoftFail was ...
1
vote
1answer
58 views

Error: SPF record must be in the correct format

I need some help with set up the SPF record. When I created the SPF record just like this: v=spf1 a mx include:_spf.google.com include:getresponse.com ~all When I run this for a test: https://...
0
votes
1answer
55 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
-3
votes
2answers
62 views

not allowed to send mail from my own account?! DNS lookup / SPF

I give training and therefor i have a gmail account (linked to my weebly website www.serenewarrior.nl) Sometimes I get a Delivery Status notification (below) saying I am not allowed to sent mail and ...
1
vote
2answers
44 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
0
votes
2answers
83 views

Web-generated emails not compliant with DMARC

We have a classified ads website. Buyers can contact sellers. The message is directly generated on the site (php7) and sent to the user by email. If we follow the recommandations from openspf, we ...
4
votes
1answer
85 views

How to recover domain name from previous bad SPF record?

TL;DR: We had SPF too permissive (+all) and spammers used this to send tons of spam "from" our domain. We restricted that to ~all and added DMARC (not DKIM though), now other providers do not trust ...
0
votes
1answer
50 views

Unmodified SPF record, but validation results vary

I manage a small web server and have had some issues getting SPF/DMARC setup correctly for the domain. I'm trying to figure out why SPF validation sometimes passes and sometimes fails. This occurs ...
0
votes
0answers
32 views

Send a message using an address from a different domain

Assume that I use GSuite to handle emails for my domain (e.g., admin@my.com). Now I have a client who wants my application to send an email message with the FROM address using their domain (e.g., info@...
0
votes
0answers
42 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
1
vote
2answers
49 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
0
votes
2answers
74 views

SPF Records and Too many DNS lookups

It's been suggested to me that I configure SPF records for my domain and I have done so. I use gsuite for email and have mx records properly configured to send mail via gsuite. My web app sends emails ...
-1
votes
1answer
131 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
1answer
134 views

DMARC fails on forwarded mails without DKIM

I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and ...
0
votes
1answer
49 views

Can a DMARC “reject” policy prevent NDR backscatter?

Our email is being spoofed. We already have SPF/DKIM/DMARC p="quarantine" policies in place however we are still receiving thousands of Non-Delivery Receipt (NDR) in our inbox. Will changing to DMARC ...
1
vote
1answer
208 views

Why does SPF allow +all?

I was looking at how various sites have their SPF records set, and found a site whose SPF record ends with +all. This seems to be a bad idea, and spf-all says the following about the matter: +all ...
0
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
0
votes
1answer
385 views

How to include multiple domains in an spf TXT Record ~all and ?all [duplicate]

I am looking to setup a TXT spf record that has 2 included domains...individually: v=spf1 include:hotmail.com ~all and v=spf1 include:servers.mcsv.net ?all What is the proper way of combining them ...
0
votes
1answer
95 views

Does SPF have a core weakness when using a third-party email service?

An SPF record is a DNS record that essentially states which IPs/domains are allowed to send email on behalf of the domain. When using a third-party email service, the service often recommends using a ...
0
votes
1answer
146 views

Long SPF (TXT) records not resolving on Ubuntu

When trying to construct a long SPF record in the form: example.com. 86400 IN TXT "v=spf1 ip4:1.2.3.0/24 include:example.net include:_my_whitelist.example.com -all" _my_whitelist....
0
votes
0answers
83 views

Void lookups due to a and mx mechanisms in SPF records

Our web host suggested using this SPF record v=spf1 include:spf.mschosting.com -all However, when we did a SPF test for our domain at https://mxtoolbox.com/spf.aspx , we got this error screenshot 1 ...
5
votes
2answers
513 views

Postfix: How to accept email with valid SPF but unresolvable hostname?

I have configured my Postfix to reject email sent from hosts without PTR record and hostnames that don't have A record. I found there are legitimate mail servers with valid SPF records which don't ...
0
votes
0answers
23 views

Centos 6.9 - DKIM - not autenticated

i have this error on postfix (Centos 6.9) May 21 17:41:48 mailer opendkim[1710]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid) May 21 17:44:19 ...
0
votes
2answers
112 views

SPF keeps on failing

Based on this link how to set up SPF and answer in closed topic here My dns record looks like this v=spf1 a mx ip4:xxx.xxx.xx.xx -all include:_spf.google.com ~all but google throws an error ...
1
vote
1answer
260 views

SPF softfail even when set seemingly correctly [duplicate]

I have my own postfix server, that serves only as a forwarding mail server, i.e. if you send email at admin@mydomain.com, it will arrive into my gmail/whatever else. My SPF looks as such: v=spf1 ip4:...
0
votes
0answers
33 views

iRedmail: Email lands in SPAM on Hotmail

I am running a webserver hosting two domains (domain1, domain2). Further, I am using iRedmail as the mailserver. I can receive emails for both domains, however, when I try to send a mail from either ...
0
votes
0answers
75 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
297 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
-2
votes
3answers
362 views

Received-SPF: neutral [duplicate]

When I send emails from my application I am getting a spf neutral error. I have been working with Google and my hosting company, but none of them can figure it out. Below is my spf record. "v=spf1 ...
1
vote
1answer
44 views

How to setup SPF and DMARC for satellite hosts?

If I send mail directly from relay host - everything works like a charm. All checks are passed. Delivered-To: 102@host.me Received: by 10.100.182.171 with SMTP id t40csp2626933pjb; Thu, 26 ...
1
vote
1answer
528 views

SPF declared as “hard fail” then what?

I have question about how email authentication relies on SPF record: If SPF declared as "hard fail", what should be done? If SPF declared as "soft fail", what's the difference? Please briefly ...
0
votes
1answer
133 views

No protection for gmail spoofing?

Somebody can verify that gmail's SPF and DMARC records are: "v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ~all" "v=DMARC1; p=none; sp=...
-1
votes
1answer
84 views

Send email as a customer using just CNAME and setting up own DKIM, SPF

I own mydomain.com and I am trying to send emails as mycustomer1.com, mycustomer2.com, etc. (using mailgun). I am aware that by making my customer add DKIM and SPF records for mydomain.com will ...
2
votes
1answer
153 views

Checking DMARC Non-compliance, 4 Examples

We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we ...
0
votes
0answers
228 views

SPF Record Partially Failing

I have a domain that's having issues sending mail to some recipients. The domain uses Office 365 Exchange Online. I've set up SPF, DKIM, and DMARC, all are validated and working properly when I check ...
1
vote
0answers
270 views

mail ends in google spam folder while SPF pass, DKIM pass, DMARC pass

I am trying to send basic mail to a gmail user test and the mail ends up in the spam folder. I don't really understand why. I used to send through ubuntu sendmail, spent a lot of time setting up ...
0
votes
1answer
136 views

Alert me This sender failed our fraud detection checks and may not be who they appear to be

I'm using ZenDesk Ticketing system in the company. ZenDesk has support email which is used by customers to send their problem requests to, thus creating a new ticket. But we're using our own support ...
0
votes
1answer
362 views

How do I properly configure a FQDN for sendmail to work with PHP mail()?

I'm sure variations on this question have been asked and I apologize if this is a duplicate, but I just can't seem to find something that works in my situation without breaking something else. I'm ...
3
votes
1answer
210 views

Is GMAIL incorrectly failing SPF?

0365 mail users are encouraged to use include:spf.protection.outlook.com -all in their SPF record. I have followed this guidance. My company's spf record says: v=spf1 include:spf.protection.outlook....
1
vote
1answer
47 views

SPF errors on a new domain name

I'm new to web hosting and configuring emails, and I was hoping I could get some help. I purchased a reseller account and I set up my first cPanel account on a domain that I have. I then created a ...
1
vote
1answer
113 views

DMARC report: SPF fails with mx-domain as spf-domain in auth_result

I have setup a mail server with several postoffices/domains. DKIM, SPF and DMARC are setup for every domain. For the mailserver domain, which is a postoffice as well, I get weird DMARC reports, where ...
2
votes
1answer
171 views

SPF and DKIM pass, but DMARC fails for source_ip

I have configured our DMARC policy to quarantine and our domain SPF and DKIM are configured appropriately. The SPF record is as follows: v=spf1 +a +mx +include:sendgrid.net -all However this is the ...
0
votes
2answers
580 views

What is the consequence of SPF error 'Too many lookups'?

I am adding a domain (xero.com) to our existing SPF record, to allow marketing emails to be sent from an external system and appear as if they are from us. The SPF record for xero.com is large and ...
3
votes
1answer
227 views

Postfix setup with different domain name, reverse lookup and SPF

I would like to set up Postfix properly to serve multiple virtual domains while complying to all standards and being able to enable security measures like SPF. The server has the hostname server....
2
votes
2answers
71 views

In SPF DNS record, can I use both a and include?

I'm using G SUITE to accept mail for my domain, so I've set my SPF record as recommended by Google to v=spf1 include:_spf.google.com ~all. Now I want to send emails from my webservers and I want to ...