Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

0
votes
0answers
10 views

Office 365 Message Tracking on Authentication-Results: spf=fail

I would like to modify my Office 365 spamfilter to mark all messages with Authentication-Results: spf=fail as spam. Before I enable this, I would like to receive an overview of all mails that have ...
1
vote
2answers
283 views

Is this correct for a SPF record based on our setup?

Our company has a SMTP server that sends mail out on behalf of our customers. So a customer would log into our system, go to a specific section, and can fill out a form to send an Email to whoever ...
0
votes
1answer
42 views

`connect to private/policy-spf: No such file or directory` when receive mail by postfix in centos 7

My system is centos 7 with postfix,dovecot,pypolicyd-spf, opendkim. I can send mail but cannot receive mail, I notice warnings as below: Feb 6 20:01:09 srv-8327 postfix/smtpd[20391]: warning: ...
0
votes
0answers
15 views

If mail from “me” isn't DKIM signed, reject it

I am getting DMARC reports stating that an unauthorized IP is claiming to be me (our domain is in the headers). Looking at this section of the DMARC report, it occurs to me that I should be able to ...
0
votes
1answer
23 views

How can I create a DKIM Record?

I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
-1
votes
1answer
37 views

I have set the DKIM record but my emails is not signed?

I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
0
votes
0answers
23 views

SPF record equals pass but why, it should not?

I am struggling here to find a solution to allow real sender through but block the spoofed emails. Here is the SPF record: https://tools.sparkpost.com/spf/inspector/catholicdioceseofwichita.org Can ...
0
votes
0answers
7 views

DMARC <policy_evaluated> SPF fails when using PostSRSD

I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To ...
0
votes
1answer
19 views

Combine 2 spf records into 1

I have 2 spf records for my email example.com The first one is from my hosting provider. I DO send and receive email through my hosting provider. Emails from here do not go to spam. "v=spf1 ?include:...
-1
votes
1answer
53 views

SPF record permerror showed in an email header, but no reason for it

Our customers are complaining about the spam issue. There are a number of spam emails which are not tagged as spam emails. These spam emails were sent from forged seneder address, which means our SPF ...
1
vote
1answer
20 views

SPF and Gmail as mail client

I have mail server hosted by some "3rd party provider" (https://www.neoserv.si/) and I want to use Gmail as email client. In Gmail I have set POP3 to copy all incoming messages and IMAP so I can send ...
1
vote
1answer
34 views

Spoofing/Spam received from GSuite alias accounts

The company currently have 2 domains registered: "dom1.com" and "dom1.com.ex". "dom1.com" is hosted and is the main domain associated on our GSuite account to create user accounts to send mails, "dom1....
0
votes
2answers
47 views

SPF: Multiple Mailserver

I have a domain with this A record: A 1.2.3.4 And a record for mail like this, I have my mail services at a different hosting provider for exchange. MX mxpool.example.com Now I want to set up a ...
0
votes
1answer
17 views

SPF and DMARC protection

Today while working at my company, we saw allot of automatic reply emails coming into one of our group inboxes (i.e. info@company.com). We suspect that this email address is being used in a phishing ...
0
votes
1answer
14 views

Using multiple A-records within one SPF a:name

Let's say my SPF record looks like this: v=spf1 a:spf.example.com -all And the records for spf.example.com look like this: spf.example.com A 12.12.12.12 spf.example.com A 12.42.66.12 spf.example....
-1
votes
1answer
35 views

SPF Outlook Web App (OWA) undeliverable email

PROBLEM: Outlook.com web app (OWA), synchronized with my local server via IMAP and SMTP(STARTTLS), returns "Undeliverable message" for all messages sent. PROPOSAL: (rejected) This returning message ...
-2
votes
1answer
83 views

Setting SPF record for mail relay servers to avoid softfail

I have an issue with correctly setting the SPF record for my own domain. Initially my DNS settings as set by the domainhoster were as follows: @ TXT "v=spf1 mx ~all" @ MX 10 mx101....
0
votes
1answer
117 views

SPF on Office 365 - Can the return-path address be spoofed by another Office 365 sender?

I'm not an email expert by any stretch, so please forgive my lack of correct terminology. My understanding of SPF is that mail servers that receive mail will look at the return-path domain, and check ...
0
votes
1answer
64 views

Does an SPF SoftFail trigger DMARC reject

I've googled around and even tried to find the answer in the RFC to this one. For this question, let's assume DKIM will always fail and leave it out of the picture. If the DMARC policy is p=reject ...
1
vote
2answers
50 views

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as ...
-1
votes
1answer
81 views

Emails go to spam ( Reverse DNS is set , DKIM pass , SPF pass , DMARC pass ) [duplicate]

It's been now 3 days that I am struggling with configuring my emails to go to the inbox. I have a VPS server at OVH and a domain name. I have configured everything in virtualmin with OpenDKIM and ...
2
votes
1answer
53 views

Clarification on spf record DNS lookup limit

I am trying to get clear on how the 10 DNS lookup for spf records are done. I have a client that claims they have reached the maximum - my understanding is that there would be recursive dns lookups ...
1
vote
0answers
64 views

What is wrong with this e-mail which is failing SPF(mailfrom) and DMARC?

This is a follow-up from "Why is my opendmarc failing pretty much everything that comes through?". I'm really struggling to understand what is going on. Outgoing mail is verified correctly by the ...
6
votes
3answers
389 views

Why is my opendmarc failing pretty much everything that comes through?

I have this domain for which I set up SPF, DKIM, and DMARC stuff. Let's pretend the domain is example.com which has the following entries in its DNS zone: example.com. 600 IN MX ...
0
votes
1answer
55 views

How to interpret the syntax of “v=spf1 a -all”

I'm using this reference page... http://www.openspf.org/SPF_Record_Syntax ...but I don't know if I'm interpreting the syntax correctly. Are the following scenarios correct? "v=spf1 a -all" a = ...
1
vote
2answers
90 views

Multiple SPF entries in same or separate TXT records

I want to use a mass mailing service, e.g. sendgrid, mailgun, etc. And so I must update my zone file to include the correct SPF records. Suppose my domain is example.com. My DNS provider ...
1
vote
1answer
130 views

Can I bypass SPF restrictions by using an SMTP envelope FROM with another domain that has either no SPF record or an invalid one

Consider DMARC record: v=DMARC1;p=reject;rua=mailto:xyz;ruf=mailto:xyz;adkim=s;aspf=s;pct=100;fo=1;sp=reject Also consider domain example.com with a TXT record: v=spf1 include:_spf.google.com -...
3
votes
1answer
45 views

Once SPF is correctly setup is it normal for spoofed email to go to spam folder or should Gmail deleted them?

In the spam folder of Gmail can be found illegitimate spam emails apparently sent from my own domain email address but from an origin not allowed by SPF. The domain is on G Suite emails. SPF is ...
-1
votes
1answer
335 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
3
votes
1answer
719 views

SPF fail vs. soft-fail pros and cons

Question What are the advantages and disadvantages of using Fail vs. a SoftFail in my SPF record? What I found on the topic Back in 2007, knowledgeable-seeming folks seem to have said SoftFail was ...
1
vote
1answer
204 views

Error: SPF record must be in the correct format

I need some help with set up the SPF record. When I created the SPF record just like this: v=spf1 a mx include:_spf.google.com include:getresponse.com ~all When I run this for a test: https://...
0
votes
1answer
328 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
-3
votes
2answers
140 views

not allowed to send mail from my own account?! DNS lookup / SPF

I give training and therefor i have a gmail account (linked to my weebly website www.serenewarrior.nl) Sometimes I get a Delivery Status notification (below) saying I am not allowed to sent mail and ...
2
votes
2answers
71 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
1
vote
2answers
140 views

Web-generated emails not compliant with DMARC

We have a classified ads website. Buyers can contact sellers. The message is directly generated on the site (php7) and sent to the user by email. If we follow the recommandations from openspf, we ...
4
votes
1answer
91 views

How to recover domain name from previous bad SPF record?

TL;DR: We had SPF too permissive (+all) and spammers used this to send tons of spam "from" our domain. We restricted that to ~all and added DMARC (not DKIM though), now other providers do not trust ...
0
votes
1answer
58 views

Unmodified SPF record, but validation results vary

I manage a small web server and have had some issues getting SPF/DMARC setup correctly for the domain. I'm trying to figure out why SPF validation sometimes passes and sometimes fails. This occurs ...
0
votes
0answers
35 views

Send a message using an address from a different domain

Assume that I use GSuite to handle emails for my domain (e.g., admin@my.com). Now I have a client who wants my application to send an email message with the FROM address using their domain (e.g., info@...
0
votes
0answers
98 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
1
vote
2answers
69 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
0
votes
2answers
168 views

SPF Records and Too many DNS lookups

It's been suggested to me that I configure SPF records for my domain and I have done so. I use gsuite for email and have mx records properly configured to send mail via gsuite. My web app sends emails ...
-1
votes
1answer
264 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
1answer
253 views

DMARC fails on forwarded mails without DKIM

I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and ...
0
votes
1answer
83 views

Can a DMARC “reject” policy prevent NDR backscatter?

Our email is being spoofed. We already have SPF/DKIM/DMARC p="quarantine" policies in place however we are still receiving thousands of Non-Delivery Receipt (NDR) in our inbox. Will changing to DMARC ...
1
vote
1answer
458 views

Why does SPF allow +all?

I was looking at how various sites have their SPF records set, and found a site whose SPF record ends with +all. This seems to be a bad idea, and spf-all says the following about the matter: +all ...
-1
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
0
votes
1answer
2k views

How to include multiple domains in an spf TXT Record ~all and ?all [duplicate]

I am looking to setup a TXT spf record that has 2 included domains...individually: v=spf1 include:hotmail.com ~all and v=spf1 include:servers.mcsv.net ?all What is the proper way of combining them ...
0
votes
1answer
131 views

Does SPF have a core weakness when using a third-party email service?

An SPF record is a DNS record that essentially states which IPs/domains are allowed to send email on behalf of the domain. When using a third-party email service, the service often recommends using a ...
0
votes
1answer
189 views

Long SPF (TXT) records not resolving on Ubuntu

When trying to construct a long SPF record in the form: example.com. 86400 IN TXT "v=spf1 ip4:1.2.3.0/24 include:example.net include:_my_whitelist.example.com -all" _my_whitelist....
0
votes
0answers
121 views

Void lookups due to a and mx mechanisms in SPF records

Our web host suggested using this SPF record v=spf1 include:spf.mschosting.com -all However, when we did a SPF test for our domain at https://mxtoolbox.com/spf.aspx , we got this error screenshot 1 ...