Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
0 votes
1 answer
19 views

Do I need to setup this postfix as a "relay" ? To forward all my emails to my gmail

I am not sure what function I need in this situation, or how to configure it... I have many domains, with email accounts me@mydomain1, me@mydomain2, I set my domains to have my one mail server (which ...
  • 1,006
0 votes
0 answers
36 views

Correct SPF record

I have been asked to apply DMARC protection to a domain. Part of this requires me to add an DNS record to the domain management console, however I have come across a stumbling block. The DMARC checker ...
1 vote
2 answers
75 views

Managing DNS lookup limit of SPF for a domain with many sending email services

I am webmastering for a sports association, and I would need to set up SPF records for the club's domain. However, I'm exceeding the 10 lookup limit, and would need guidance how to best resolve the ...
0 votes
1 answer
48 views

Email goes to spam even with valid SPF, DKIM and DMARC records, dynamic rDNS on AWS instance

I have an instance on AWS and fighting with sending emails through cPanel. All records are OK (checked on MX toolbox): SPF, DKIM, DMARC at the cPanel level and the WHM level (hostname). Even rDNS is ...
  • 101
0 votes
1 answer
61 views

Managing SPF with multiple users on an email provider

I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
  • 9
0 votes
1 answer
39 views

How to set spf record to let my 2 server send mail by my domain?

Hi I'm using a directadmin server's hosting. when my website send mail by php, it will use user@mydomain.com to send email out but mydomain.com's email is hosting by google workspace I was set to v=...
7 votes
3 answers
1k views

Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail

Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail. When I "View Original Message" in GMail, I see... SPF: NEUTRAL with ...
  • 181
1 vote
0 answers
20 views

Postfix after-queue content filter

I am running a postfix/dovecot/spamassassin/clamav system on Debian 10 with Postfix 3.5.13 for my domains. One domain has a small private mailing list. If someone writes to the list postfix prepends ...
1 vote
3 answers
61 views

SPF FAIL but DKIM PASS with my own domain

I do not understand the fail results in the following google DMARC report to our domain. I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes? <...
0 votes
1 answer
31 views

SPF include a main domain & its subdomains

I need to configure SPF using ( include ) for one domain and its subdomains too at the same time Example : domain1.com has SPF for main domain + 4 subdomains domain1.com has spf v=...
2 votes
1 answer
61 views

DKIM & SPF Allignment for Subdomains

We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
0 votes
1 answer
75 views

Publishing Exchange Server public IP address in a hybrid Exchange setup?

I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup. I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
0 votes
1 answer
317 views

DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing

People, Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com I got this error: DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against ...
6 votes
2 answers
660 views

How can I create and update the existing SPF record to allow more than 10 entries?

How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record? I wanted to add these two: include:mailgun.org include:sendgrid.net This is my ...
1 vote
1 answer
53 views

DMARC reports - fail then pass, and "softfail"

Here are two records from reports, with the actual domain name of my client replaced with "example.com". In the first one, SPF is marked "fail" above under "policy_evaluated&...
0 votes
1 answer
522 views

spf blocked- can't send emails to people who uses gmail

I use 1and1 Ionos for my email server - I can't send emails to people who use google gmail spf record v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de ~all I am not sure what I can do - ...
0 votes
1 answer
94 views

SPF denying emails, and different IPs sender

I'm pretty new to email server configuration, so now I'm trying to make my SPF work well but I'm facing a strange problem. My SPF is like this v=spf1 +mx +a +ip4:xxx.xxx.xxx.xxx +include:_spf.google....
0 votes
0 answers
79 views

Debugging occasional "Temporary failure in name resolution"

I have an internet-connected mailserver. A friend wants to send Email to one of the hosted domains. occasionally smtpd reports: Jun 24 00:56:22 myserver postfix/smtpd[xxx]: warning: hostname e2i740....
  • 101
0 votes
2 answers
625 views

gmail is rejecting my e-mails to a recipient with a gmail address with a 550-5.7.26

I have a fairly straight forward email setup using postfix. Within my house running on a raspberry-pi to which my router forwards all ports. I have a postfix instance that can see incoming mail. A ...
  • 137
0 votes
1 answer
166 views

Network Solutions DNS not always returning DKIM and SPF records

If there is a more appropriate place to ask this or it is a duplicate, please tell me. I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
1 vote
3 answers
1k views

Can I stop a SPF SOFTFAIL in Gmail when sending to and from addresses that have a mail alias?

I have a vanity domain (mydomain.com) hosted by Gandi and configured with mail aliases for my family that point to our respective Gmail addresses: Alias Real address me@mydomain.com me5678@gmail.com ...
  • 113
1 vote
2 answers
78 views

Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?

Pretty new to spf/dkim and dmark. After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
  • 877
1 vote
0 answers
151 views

520 ip and spf record not match

We are using Google Workspace and set Email forwarding using recipient address map to forward messages at our domain name (@example.com) to an external domain name (@external.com). Ex. mail sent to ...
0 votes
0 answers
324 views

How to configure EXIM to check SPF record for incoming emails and add 'Received SPF' header to the incoming emails?

I'm playing with Exim and created a mail server that can accept and send emails alright. Now, I want to enable SPF checking for every incoming email so that a Received SPF header is added to these ...
0 votes
1 answer
834 views

Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record

My environment: hMailServer 5.6.8 on Windows Server 2022 Standard Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
-1 votes
1 answer
251 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
  • 1
1 vote
1 answer
210 views

How to replace "via amazonses.com" with my apps branding "via example.com" for the email identities in AWS SES?

So in SES - there are two ways to verify identities as I can see: Email identities Domain identities With domain identiies - it is easier to fix the "signed-by" and "mailed-by" ...
  • 125
8 votes
3 answers
995 views

Does SPF provide benefits along with DKIM+DMARC?

I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming ...
3 votes
3 answers
390 views

How to set up DNS settings with a domain in the middle for DKIM and SPF?

I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
  • 125
0 votes
0 answers
155 views

SPF Too Many DNS Lookups issue

In our scenario, We're running into an issue with our SPF records in route53. We are receiving SPF Too Many DNS Lookups because we are using multiple mail services. Is there a way to resolve this? I ...
1 vote
3 answers
63 views

Meaning of "sender"?

Reading documentation about SPF records, I can't quite seem to disambiguate the meaning of "sender". It could mean "the IP where the mail client sent the message" or it could mean &...
0 votes
0 answers
83 views

postfix to gmail silent delivery failure

With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
1 vote
1 answer
104 views

email validation: is there any point doing both SPF *and* reverse DNS tests?

For a receiving MTA, it seems to be unnecessary to check both the SPF record for an incoming SMTP connection, and to do an rDNS/PTR lookup. Consider: Server gets SMTP connection from aaa.bbb.ccc.ddd, ...
  • 47
0 votes
0 answers
195 views

SPF records with a dynamic IP to a smtp relay with Office 365

I'm helping out a client setup an smtp relay because our software is failing at times to send email when using the smtp server of smtp.office365.com and we have found that setting up a smtp relay via ...
6 votes
2 answers
2k views

SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain

Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended ...
  • 169
0 votes
0 answers
160 views

Softfail on forwarded emails sent through Yahoo mail - Is there a fix?

happy to be here. Excuse me for the wall of text but I am trying to help a friend who wants to keep on using his Yahoo mail for sending emails from his business email address. His mail server is on ...
0 votes
1 answer
368 views

postfix: how to force IPv4 through SMTP?

Problem I have successfully set up a Postfix mailserver with an SMTP interface, set up DKIM, DMARC, SPF, all that stuff. But I had a problem when testing the delivery of emails to Gmail. Namely, SPF ...
  • 127
0 votes
1 answer
397 views

How can it be possible dkim fails whereas spf pass

I have set up a postfix which sends emails. I have configure spf, dkim and dmarc (with p=none). I have checked with mail-tester: spf and dkim work fine. I have set up a dmarc rua in order to receive ...
  • 347
0 votes
2 answers
189 views

send email from another server than FROM domain without being marked as spam

I want to send a mail from a website. The mail server from this domain is not publicly reachable, so I can't use that to send the mail. The webserver that hosts the website has another email server ...
  • 101
0 votes
1 answer
364 views

Compared to SPF MAIL FROM checks, what are HELO checks good for? [duplicate]

I’m starting with SPF on my (email) domain. (No DKIM or DMARC yet.) I see little usefulness in HELO identity checking in SPF and am thinking about setting the HELO identity to my domain (instead of ...
0 votes
1 answer
257 views

Setup DNS records for SMTP send-only server

I have website on hosting with domain exmpl.com. I have DNS record for exmpl.com: exmpl.com MX(10) mail.exmpl.com mail.exmpl.com A XX.XX.XX.XX exmpl.com TXT v=spf1 +a +mx +a:hosting.server ~all All ...
1 vote
2 answers
675 views

SPF Records: Outlook shows fail, Google shows pass

I am using Office 365 for emails, and have configured the DNS SPF record as: v=spf1 include:spf.protection.outlook.com ~all When I send emails to Google recipients, the email headers show Received-SPF:...
  • 11
3 votes
1 answer
948 views

How is this email passing DMARC?

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.) This is disturbing, as it shows as "from foo.com", yet the sender ...
0 votes
0 answers
611 views

How to combine multiple SPF domains, one with an mx mechanism?

I combined 3 SPF records using the standard protocol, but got a null error after combining them. Individual records: v=spf1 include:spf.sendinblue.com mx ~all v=spf1 include:dc-aa8e722993._spfm....
0 votes
1 answer
63 views

How do I add individual mail-sending websites to my SPF record?

My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:...
  • 1
0 votes
0 answers
43 views

How to set SFP record so emails don't appear in spam

I have a problem setting up an SFP record. I have two domains "aaa.com" and "bbb.com". The first has a purchased mx option on OVH. The second is at the external operator and points ...
  • 1
0 votes
1 answer
209 views

Why am I failing SPF only in my Google DMARC report?

Curious as to why my Google DMARC is coming back with a fail under SPF. Here is the report: <?xml version="1.0" encoding="UTF-8" ?> <feedback> <report_metadata> ...
2 votes
1 answer
445 views

Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?

Domain: franzoni.eu Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP ...
2 votes
1 answer
860 views

Why does spf fail in DMARC report from Google?

I recently received a DMARC report from Google alerting me of a few SPF failures with mail originating from IP addresses belonging to Amazon SES. A sample record is as follows (I have replaced our ...
0 votes
1 answer
98 views

Confused about SPF Records

I thought that ?all in SPF should not be used. Then I examinated SPF records of some local email provider companies and I found this: v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?...

1
2 3 4 5
17