Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
0
votes
0answers
30 views

record DKIM on IONOS makes sense?

If I am sending mail through smtp, I understand that it is IONOS who signs those emails, right? I would like to add the DKIM header to my emails, I know that it is necessary to publish a CNAME record ...
1
vote
1answer
27 views

Understanding SPF fails for email sent

I'm trying to get my head around this issue. My emails are getting sent into spam for people. In this case, its gmail. If I look at the email details I get: 109.74.201.130 is another server, which ...
0
votes
1answer
40 views

SPF and DKIM for one domain on two servers [closed]

I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain. I now want to setup another server ...
0
votes
1answer
743 views

emails to Yahoo are ending up in SPAM folder despite spf=pass, dkim=pass and dmarc=pass

Are we possibility having a reputation problems with Yahoo emails? Yahoo raw mail header finds my policy I published: dmarc=success(p=REJECT,sp=REJECT) Emails to clients at Google and Outlook are not ...
1
vote
0answers
48 views

Why is opendmarc SPF failing this arriving message?

Why is this incoming message failing? postfix/smtpd[4776]: connect from mail-mw2nam10on2073.outbound.protection.outlook.com[40.107.94.73] postfix/smtpd[4776]: Anonymous TLS connection established ...
0
votes
1answer
64 views

All mails to Yahoo are deferred or in spam

i have read a lot about the problems of delivering mail to yahoo.com, i have contact the tech support but the result it's always the same: from my server all mails to yahoo./aol. are deffered and when ...
1
vote
1answer
47 views

Is SPF alignment important with DMARC?

When setting up a DMARC policy for an organization, is it important at all to have SPF alignment? I've gathered that: Most email service providers support DKIM for a custom domain. Not all email ...
1
vote
0answers
39 views

Postfix send mail only to GMail, all other domains are deferred and not sended

My Postfix server is running on Debian Stretch. It is able to send emails to a GMail address without problems which are not considered as spam. At the DNS level I configured DKIM, SPF and DMARC and ...
2
votes
1answer
76 views

Any benefit to adding SPF record for mail relay that doesn't align with RFC5322.From domain?

When using a mail delivery service, like AWS SES or SendGrid, is there any benefit to including their SPF records for the domain in the RFC5322.From (header-from) header? With how they operate by ...
1
vote
1answer
24 views

Combine SPF record with and without rules/mechnisms

I'm very new to DNS world, and now I'm supposed to add an SFP record like v=spf1 mx include:_spf.blah.com ~all to an existing SPF record on a zone. existing TXT looks like this : v=spf1 include:_spf....
2
votes
1answer
220 views

SPF DNS void lookup limit exceeded [duplicate]

while testing my DKIM/SPF config by using the port25.com email service, I am getting the following reply for my SPF record: permerror (DNS void lookup limit exceeded) However, my spf record does not ...
1
vote
4answers
303 views

Using SPF and DMARC records to combat invalid email subdomains

I have been able to confirm that bad actors are sending emails from nonexistent subdomains of my company's primary domain. Let's say my primary domain is foo.com. Email is sent from that base ...
1
vote
1answer
23 views

SPF default policy when “all” is missing

What is the policy that is applied when "all" is missing from an SPF record? For example as in v=spf1 a ip4:198.51.100.15.
0
votes
1answer
28 views

For SPF records do 'a' and 'mx' achieve the same result in many cases?

Example DNS Records: Type: TXT Hostname: example.com Value: returns v=spf1 a ~all Type: A Hostname: mail.example.com Value: 1.1.1.1 Type: AAAA Hostname: mail.example.com Value: 1000:1:1:1:1:1:0001 ...
0
votes
1answer
31 views

Setting up SPF record for A2Hosting shared hosting

I'm trying to setup A2Hosting SPF correctly since the proposed SPF is landing the emails in the SPAM folder in Gmail. This is the default SPF: v=spf1 +mx +a +ip4:210.125.99.77 ~all But when ...
2
votes
2answers
596 views

How does DKIM work when sending emails from multiple sources/servers?

So if I'm understanding DKIM correctly, it basically is a public/private key type of service. However, how does this work if you send emails from multiple servers/sources? For instance, I have a ...
0
votes
1answer
32 views

Way to open up SPF to all IPs just for a subdomain?

I know this is a bit of a weird / silly question, but we have a sub-domain which acts as a way for our hotel owners to communicate with clients. messages.mydomain.com. What happens if they have a ...
0
votes
1answer
33 views

Postfix working on separate server having issues delivering mail to a specific domain

I have the following situation. My main domain is pointed to a Hostgator account. Because of bad performance of the site, the client decided to give DigitalOcean a go, but leaving the e-mails on ...
1
vote
1answer
116 views

what is the appropriate DMARC configuration for a domain that should fail hard on DKIM but soft on SPF

Messages sent by my domain will always be DKIM-signed and any that are not should be immediately discarded by recipients. But strict SPF enforcement leads to problems where internal mail-forwarding ...
0
votes
1answer
64 views

SPF- and DKIM- align fails on a few emails from a larger batch

We are sending large numbers of emails (hundreds of thousands) mostly for our clients. Of course, we have configures SPF, DKIM, and DMARC records properly for all domains who use us. We pass all tests ...
0
votes
0answers
314 views

With valid SPF, DKIM, and DMAR, Office 365 email still goes to junk mail and got Authentication-Results-Original: spf=none

My goal is to be able to send email from my website using smtp.office365.com and the emails will go into inbox instead of junk mail. But so far, I have not succeed. If the receipt is gmail, the ...
0
votes
1answer
47 views

Create SPF TXT for Wildcard Domains

Today I use DigitalOcean as hosting my software. Our platform is a SaaS that sends emails from wildcard domains, example: purchase@subdomain.example.com; purchase@another-subdomain.example.com; ...
0
votes
1answer
40 views

Gmail couldn't verify that MyClientSite.ie actually sent this message (and not a spammer)

I'm having problems with delivery of emails from an application on a web server to Gmail. Gmail is displaying a round circle with a question mark, instead of the first letter of the sender, and ...
1
vote
1answer
382 views

DMARC strict vs relaxed alignment?

I've been configuring DNS records for a mail server and got stuck when it came to DMARC's alignments. I know that both relaxed and strict are valid options, as well as relaxed being default setting. ...
0
votes
2answers
72 views

Set up SPF: encountered SPF Permanent Error

Our DNS is managed through Microsoft. I need to set up a new record to allow a new website to send email. Here is what I did. 1) I set up the following SPF record host: subdomain value: v=spf1 ip4:...
0
votes
0answers
456 views

DKIM failure “message has been altered”

Summary I have a Mattermost server which needs to send emails out to users when they sign up, etc. These emails are failing DKIM checks and showing up in users' Gmail as spam. Observed behavior I ...
0
votes
2answers
31 views

SPF for zoho mail servers

I have zoho domain mails. for Spf verification Icreated as pe their instruction as follow as. name : @.vernia.in Text "v=spf1 include:zoho.com ~all" and saved. But on verification it says "We are ...
0
votes
0answers
23 views

Office365 SPF fails microsoft mailsever hop

I have a problem regarding some of my mails ends up in junk mail because of failing SPF-validation. My SPF looks like the following v=spf1 include:spf.protection.outlook.com include:sendgrid.net ~...
0
votes
0answers
27 views

SPF chained “include” and “redirect”

Try to debug why messages sent from non-ours IPs are not marked as spam. We have quite long chain of SPF records (no way to shorten it but can change some). Please advice the better way! If I have ...
1
vote
1answer
276 views

DNS SPF TXT Records - is this legal?

foo.org 1 IN TXT "v=spf1 include:_spf.google.com include:_spf.bar.com ~all" foo.org 1 IN TXT "v-spf1 ip4:99.99.99.99 include:_spf.google.com ~all" or do they need to be combined into one ...
2
votes
1answer
613 views

Size of SPF with other TXT records

The SPF specification says: The published SPF record for a given domain name SHOULD remain small enough that the results of a query for it will fit within 512 octets. Otherwise, there is ...
0
votes
0answers
128 views

How to avoid gmail orange mark and spam filter when using cloudflare proxies?

I send emails from my site via php smtp method connected to 'smtp.gmail.com' on 465, and account added to GSuite. All my emails falls in spam folder in Gmail. The kind of emails is just password ...
0
votes
1answer
42 views

What happens when SPF includes domain that does not have SPF but A record instead

A company whose mail servers we occasionally use to send emails has asked us to include their domain in our SPF record as follows: v=spf1 [...] include:app.sgizmo.eu ~all. Now it turns out that there ...
-1
votes
1answer
78 views

Does record domain “include:” also refers to subdomains?

I have a doubt setting up my SPF record. I would like to know if I set up an include record in the SPF record will also be "including" the subdomains of that principal domain that I have included?. ...
1
vote
2answers
182 views

MX record delegation

I have a client who manages their own DNS - all the A records and CNAME records for example.com and a number of subdomains. They want to use a dedicated subdomain for email - em.example.com. They ...
3
votes
1answer
181 views

SPAM Domain Spoofing through SES

A spammer seems to be running spam through SES and spoofing our domain. We are using SPF and DKIM so I’m not sure what is going on. This is our SPF record: v=spf1 a mx include:amazonses.com include:...
1
vote
1answer
765 views

Email delivery issues with Hotmail/Outlook

I am using SendGrid to send emails and I have properly configured my domain (SPF, etc.). Usually everything works, except that Hotmail/Outlook often rejects the emails I send: reason": "550 5.7.1 ...
0
votes
0answers
47 views

SPF hosted on CENT OS. Does not restarting the “named” service after editing the SPF record break the whole DNS File?

We had to change and Include entry from: Include:Domain-name.com to: Include:_Domain-name.com This was the only change we made. After a couple days none of our hosted resources were available. My ...
2
votes
1answer
868 views

Amavis / Spamassassin - FORGED_SPF_HELO and SPF_HELO_PASS

I have a web server that sends out webform type emails via Postfix 3.3.0. No inbound. No extras. Receiving mail server is running same Postfix (but with amavis-new/spamassassin + dovecot/etc). These ...
0
votes
2answers
115 views

Does absence of SPF, DKIM, DMARC records on a domain affect the email delivery?

Say, I don't have these records for a domain at all and the email delivery is OK. Will those records improve something regarding the delivery or are they just a remedy for domain spoofing and are not ...
0
votes
2answers
76 views

Email FROM header authentication using subdomain delegation

Our company owns the domain somecompany.com and uses an external email provider emailemailprovider.com to send emails. The email provider recommends to delegate a subdomain for them to automatically ...
0
votes
0answers
58 views

Are email services looking at the “From address” along with the envelope sender when doing SPF lookups?

First, I understand the caveats and flaws of SPF as an aging authentication technology, and understand that it should be used in conjunction with DKIM and DMARC and is not a panacea for deliverability....
-1
votes
1answer
127 views

550 2607:f8b0:4864:20::132 is not allowed to send mail from [duplicate]

When I try to send an email I get the following error: 550 2607:f8b0:4864:20::132 is not allowed to send mail from mydomain.com. Please see the SPF record, with scope mfrom, identity myuser@...
0
votes
1answer
31 views

How to merge multipe spf1 records to one?

My question is rather specific than the answers I found. I know a merge record could be something like this: TXT "v=spf1 include:mailgun.org include:_spf.google.com ~all." But in my case my spf1 ...
0
votes
1answer
47 views

How to add additional IP's to SPF record along with Google Apps SPF

My current SPF record looks like: v=spf1 include:_spf.google.com ~all I'm trying to add some extra IP's to this record (for our shipping system, that emails out form our domain). The issue is that ...
0
votes
2answers
259 views

postfix-policyd-spf-python - spoof protection - spf checks FAIL but no action taken - why?

I've installed postfix-policyd-spf-python and configured the postfix integration according to the docs. This is my policyd-spf.conf config file: debugLevel = 1 TestOnly = 0 HELO_reject = ...
1
vote
1answer
256 views

DMARC Report: Sometimes DKIM Fails for Mail Server IP

What does it mean when some DMARC records indicate a failure for the correct server: <record> <row> <source_ip>1.2.3.4</source_ip> <count>8</count&...
0
votes
1answer
79 views

SPF and IPv6 fails even if the reverse DNS is created

When sending mails to Gmail I get this error Received-SPF: fail (google.com: domain of test@domain.com does not designate 2a01:4f8:xxx::2 as permitted sender) client-ip=2a01:4f8:xxx::2; When I ...
0
votes
0answers
108 views

everything Pass but emails still go to the spam folder! I think it would be about hostname but not sure and don't know how to fix this

I checked too many topics and answers tested too many things! but can't find a solution to my problem. I'm a newbie user and maybe didn't understand some answers well. I need to fix this problem as ...
0
votes
2answers
266 views

SPF record for SMTP server

I am trying to set up my SPF records to take into account that I send emails via office365 directly in Outlook etc. as well as in a web app hosted in AWS which sends email to smtp.office365.com (...

1
2 3 4 5
15