Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

0
votes
1answer
29 views

SPF on Office 365 - Can the return-to address be spoofed by another Office 365 sender?

I'm not an email expert by any stretch, so please forgive my lack of correct terminology. My understanding of SPF is that mail servers that receive mail will look at the return-path domain, and check ...
0
votes
1answer
24 views

Does an SPF SoftFail trigger DMARC reject

I've googled around and even tried to find the answer in the RFC to this one. For this question, let's assume DKIM will always fail and leave it out of the picture. If the DMARC policy is p=reject ...
0
votes
1answer
30 views

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as ...
1
vote
0answers
17 views

Weird SPF reject. MTA supposedly got mail from “0.0.0.0” and is rejecting it since SPF doesn't contain “0.0.0.0” [on hold]

I got a server let's say it's server.com, with exim, acting as MTA. On the same server there is some e-commerce or other website that is generating mails from x@example.com and sending them via this ...
-1
votes
1answer
53 views

Emails go to spam ( Reverse DNS is set , DKIM pass , SPF pass , DMARC pass ) [duplicate]

It's been now 3 days that I am struggling with configuring my emails to go to the inbox. I have a VPS server at OVH and a domain name. I have configured everything in virtualmin with OpenDKIM and ...
2
votes
1answer
27 views

Clarification on spf record DNS lookup limit

I am trying to get clear on how the 10 DNS lookup for spf records are done. I have a client that claims they have reached the maximum - my understanding is that there would be recursive dns lookups ...
0
votes
0answers
27 views

Can SPF record include multiple A domains

Hello would this be a valid SPF record for domain1.com using a records from different domains? v=spf1 a:mail.domain2.com a:mail.domain3.com -all This question is similar but uses the include and not ...
0
votes
0answers
24 views

SPF and DKIM understanding

Can someone help me understand why if office 365 I have spam set to block anything that has an SPF Hard Fail. Why is this getting through? Also, I have seen where the email passes SPF and gets through....
1
vote
0answers
26 views

What is wrong with this e-mail which is failing SPF(mailfrom) and DMARC?

This is a follow-up from "Why is my opendmarc failing pretty much everything that comes through?". I'm really struggling to understand what is going on. Outgoing mail is verified correctly by the ...
5
votes
1answer
157 views

Why is my opendmarc failing pretty much everything that comes through?

I have this domain for which I set up SPF, DKIM, and DMARC stuff. Let's pretend the domain is example.com which has the following entries in its DNS zone: example.com. 600 IN MX ...
0
votes
1answer
35 views

How to interpret the syntax of “v=spf1 a -all”

I'm using this reference page... http://www.openspf.org/SPF_Record_Syntax ...but I don't know if I'm interpreting the syntax correctly. Are the following scenarios correct? "v=spf1 a -all" a = ...
0
votes
0answers
30 views

Using OpenDMARC's SPFSelfValidate option to perform SPF check

OpenDMARC has a SPFSelfValidate option described as following in the man page: Causes the filter to perform a fallback SPF check itself when it can find no SPF results in the message header. If ...
1
vote
2answers
42 views

Multiple SPF entries in same or separate TXT records

I want to use a mass mailing service, e.g. sendgrid, mailgun, etc. And so I must update my zone file to include the correct SPF records. Suppose my domain is example.com. My DNS provider ...
1
vote
1answer
56 views

Can I bypass SPF restrictions by using an SMTP envelope FROM with another domain that has either no SPF record or an invalid one

Consider DMARC record: v=DMARC1;p=reject;rua=mailto:xyz;ruf=mailto:xyz;adkim=s;aspf=s;pct=100;fo=1;sp=reject Also consider domain example.com with a TXT record: v=spf1 include:_spf.google.com -...
3
votes
1answer
39 views

Once SPF is correctly setup is it normal for spoofed email to go to spam folder or should Gmail deleted them?

In the spam folder of Gmail can be found illegitimate spam emails apparently sent from my own domain email address but from an origin not allowed by SPF. The domain is on G Suite emails. SPF is ...
-1
votes
1answer
161 views

SPF and DKIM configuration Ubuntu 18.04 fails

I have been following this tutorial from DigitalOcean. I have followed every detail but nothing seems to work as expected. Assuming that my FQDN is the following: mydomain.com. Here are my details: ...
2
votes
1answer
230 views

SPF fail vs. soft-fail pros and cons

Question What are the advantages and disadvantages of using Fail vs. a SoftFail in my SPF record? What I found on the topic Back in 2007, knowledgeable-seeming folks seem to have said SoftFail was ...
1
vote
1answer
115 views

Error: SPF record must be in the correct format

I need some help with set up the SPF record. When I created the SPF record just like this: v=spf1 a mx include:_spf.google.com include:getresponse.com ~all When I run this for a test: https://...
0
votes
1answer
133 views

Postfix: Managing Subdomain DMARC, DKIM, and SPF when bounce emails come from the null sender “<>”

I have several postfix servers that send mail on behalf of my domain (example.com). When a from address is provided, DKIM and SPF pass properly. However, I noticed in my DMARC notifications there are ...
-3
votes
2answers
102 views

not allowed to send mail from my own account?! DNS lookup / SPF

I give training and therefor i have a gmail account (linked to my weebly website www.serenewarrior.nl) Sometimes I get a Delivery Status notification (below) saying I am not allowed to sent mail and ...
1
vote
2answers
58 views

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the ...
0
votes
2answers
122 views

Web-generated emails not compliant with DMARC

We have a classified ads website. Buyers can contact sellers. The message is directly generated on the site (php7) and sent to the user by email. If we follow the recommandations from openspf, we ...
4
votes
1answer
89 views

How to recover domain name from previous bad SPF record?

TL;DR: We had SPF too permissive (+all) and spammers used this to send tons of spam "from" our domain. We restricted that to ~all and added DMARC (not DKIM though), now other providers do not trust ...
0
votes
1answer
53 views

Unmodified SPF record, but validation results vary

I manage a small web server and have had some issues getting SPF/DMARC setup correctly for the domain. I'm trying to figure out why SPF validation sometimes passes and sometimes fails. This occurs ...
0
votes
0answers
33 views

Send a message using an address from a different domain

Assume that I use GSuite to handle emails for my domain (e.g., admin@my.com). Now I have a client who wants my application to send an email message with the FROM address using their domain (e.g., info@...
0
votes
0answers
64 views

Outbound Emails flagged as Spam from Wordpress but not Gmail(DKIM SPF issues)

I recently setup wordpress and pointed my domain to it. With that, we setup gsuite to handle email. We have the domain at godaddy and the server space on a VPS instance. I have added the MX records ...
1
vote
2answers
52 views

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted ...
0
votes
2answers
102 views

SPF Records and Too many DNS lookups

It's been suggested to me that I configure SPF records for my domain and I have done so. I use gsuite for email and have mx records properly configured to send mail via gsuite. My web app sends emails ...
-1
votes
1answer
193 views

DNS records not updating - total amateur

I'm a business management student doing an internship at a small company. They publish an e-mail newsletter through a digital marketing website every month, and I was going to publish it yesterday. ...
0
votes
1answer
174 views

DMARC fails on forwarded mails without DKIM

I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and ...
0
votes
1answer
59 views

Can a DMARC “reject” policy prevent NDR backscatter?

Our email is being spoofed. We already have SPF/DKIM/DMARC p="quarantine" policies in place however we are still receiving thousands of Non-Delivery Receipt (NDR) in our inbox. Will changing to DMARC ...
1
vote
1answer
304 views

Why does SPF allow +all?

I was looking at how various sites have their SPF records set, and found a site whose SPF record ends with +all. This seems to be a bad idea, and spf-all says the following about the matter: +all ...
0
votes
0answers
9 views

SPF Too many included lookups ? how to change to ipv4 or something else to bring to below 10 [duplicate]

my server cahardmoney.org has 14 SPF record lookups. I am setting up for sending with sendgrid but cannot figure out how to bring it down, any tips on changing the dns info to reduce to under 10? ...
0
votes
1answer
833 views

How to include multiple domains in an spf TXT Record ~all and ?all [duplicate]

I am looking to setup a TXT spf record that has 2 included domains...individually: v=spf1 include:hotmail.com ~all and v=spf1 include:servers.mcsv.net ?all What is the proper way of combining them ...
0
votes
1answer
112 views

Does SPF have a core weakness when using a third-party email service?

An SPF record is a DNS record that essentially states which IPs/domains are allowed to send email on behalf of the domain. When using a third-party email service, the service often recommends using a ...
0
votes
1answer
163 views

Long SPF (TXT) records not resolving on Ubuntu

When trying to construct a long SPF record in the form: example.com. 86400 IN TXT "v=spf1 ip4:1.2.3.0/24 include:example.net include:_my_whitelist.example.com -all" _my_whitelist....
0
votes
0answers
96 views

Void lookups due to a and mx mechanisms in SPF records

Our web host suggested using this SPF record v=spf1 include:spf.mschosting.com -all However, when we did a SPF test for our domain at https://mxtoolbox.com/spf.aspx , we got this error screenshot 1 ...
5
votes
2answers
587 views

Postfix: How to accept email with valid SPF but unresolvable hostname?

I have configured my Postfix to reject email sent from hosts without PTR record and hostnames that don't have A record. I found there are legitimate mail servers with valid SPF records which don't ...
0
votes
0answers
24 views

Centos 6.9 - DKIM - not autenticated

i have this error on postfix (Centos 6.9) May 21 17:41:48 mailer opendkim[1710]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid) May 21 17:44:19 ...
0
votes
2answers
114 views

SPF keeps on failing

Based on this link how to set up SPF and answer in closed topic here My dns record looks like this v=spf1 a mx ip4:xxx.xxx.xx.xx -all include:_spf.google.com ~all but google throws an error ...
1
vote
1answer
378 views

SPF softfail even when set seemingly correctly [duplicate]

I have my own postfix server, that serves only as a forwarding mail server, i.e. if you send email at admin@mydomain.com, it will arrive into my gmail/whatever else. My SPF looks as such: v=spf1 ip4:...
0
votes
0answers
40 views

iRedmail: Email lands in SPAM on Hotmail

I am running a webserver hosting two domains (domain1, domain2). Further, I am using iRedmail as the mailserver. I can receive emails for both domains, however, when I try to send a mail from either ...
0
votes
0answers
92 views

Mail tester have 10 score, but email flagged as spam, by gmail

I have setup an smtp postfix server, with opendkim, on a domain code-gmail.com I have put spf policy, dkim, dmarc in my domain TXT recors. I did setup reverse dns, to point correctly do my domain, i ...
0
votes
0answers
356 views

SPF softfail on gmail

I'm trying to setup my own smtp server with postfix and opendkim. I have publsished spf/dmarc/dkim recors, set up ptr. But currently, all my mail with any text goes into gmail spam folder. I have ...
-2
votes
3answers
501 views

Received-SPF: neutral [duplicate]

When I send emails from my application I am getting a spf neutral error. I have been working with Google and my hosting company, but none of them can figure it out. Below is my spf record. "v=spf1 ...
1
vote
1answer
46 views

How to setup SPF and DMARC for satellite hosts?

If I send mail directly from relay host - everything works like a charm. All checks are passed. Delivered-To: 102@host.me Received: by 10.100.182.171 with SMTP id t40csp2626933pjb; Thu, 26 ...
1
vote
1answer
781 views

SPF declared as “hard fail” then what?

I have question about how email authentication relies on SPF record: If SPF declared as "hard fail", what should be done? If SPF declared as "soft fail", what's the difference? Please briefly ...
0
votes
1answer
153 views

No protection for gmail spoofing?

Somebody can verify that gmail's SPF and DMARC records are: "v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ~all" "v=DMARC1; p=none; sp=...
-1
votes
1answer
109 views

Send email as a customer using just CNAME and setting up own DKIM, SPF

I own mydomain.com and I am trying to send emails as mycustomer1.com, mycustomer2.com, etc. (using mailgun). I am aware that by making my customer add DKIM and SPF records for mydomain.com will ...
2
votes
1answer
185 views

Checking DMARC Non-compliance, 4 Examples

We have set up DMARC and have been getting reports (policy is still set as "none"). I loaded them up in the DMARC XML-to-Human Converter (dmarcian.com) and most look great and 100% compliance. But we ...