Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Custom Return-Path for gmail domain

I do not expect my problem to be super-unique, but I was not able to find and answer so far even at Gmail help pages, and lots of googling with various terms did not provided a solution. Context: ...
0
votes
1answer
33 views

SPF/DKIM setup for a registrar's email forward

I have a number of domains with a registrar with straight forward forwards to another email address. The system has worked flawlessly for a lot of years over a lot of domains but recently I created a ...
0
votes
0answers
40 views

Postfix SPF mailfrom

I've setup postfix on my VPS Ubuntu 18.04 and I've followed guides to setup DKIM, DMARC and SPF. I have multiple domains on the server and I'm trying to send email from a domain which is not the same ...
3
votes
1answer
133 views

What's the endpoint running at `include:spf.example.com` as seen in an SPF record in DNS?

How can I run an SPF include endpoint for my organisation? In this example, the SPF record for a domain permits hosts included via the spf.example.com list, and prohibits everything else: "v=spf1 ...
1
vote
2answers
76 views

How to create SPF records for my subdomains pointing to services hosted on Azure

I have a webapp running on Azure and use Google Domains for the domain name (mywebapp.com) and DNS. Azure automatically generates URLs for different resources/services (e.g: https://black-cat-12345....
1
vote
1answer
30 views

SPF/DKIM and sending emails from parent domain

I'm trying to understand how apps such as greenhouse.io configure DNS for delegating email sending. In short, assume I am a SAAS provider saas.com and my customer is customer.com. I've seen that it is ...
0
votes
1answer
119 views

why is this DMARC failing verification?

I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3). * Your DKIM signature is valid * Your message failed the DMARC verification A DMARC policy ...
0
votes
1answer
42 views

Google SPF fails with some IPs

GMail MX are ASPMX.L.GOOGLE.COM: 1 ALT1.ASPMX.L.GOOGLE.COM: 5 ALT2.ASPMX.L.GOOGLE.COM: 5 ASPMX3.GOOGLEMAIL.COM: 10 ASPMX2.GOOGLEMAIL.COM: 10 When checking for IPs for these names, each time your ask ...
1
vote
0answers
121 views

Google G Suite DMARC + SPF + DKIM for user domain aliases fail Google Admin Toolbox CheckMX

I have set up the above in my Google's old G-Suite account for a User Domain Alias but am still getting two warning messages: https://webcoder.co.uk There were some non-critical problems detected with ...
0
votes
1answer
348 views

550-5.7.26 Unauthenticated email from domain is not accepted due on ERP only

I have made updates to our mail server to use DMARC. So after This our ERP system cannot send emails to gmail.com or yahoo.com but Outlook sends emails with no problems. Below is the header for an ...
1
vote
1answer
87 views

Why does my postfix reject mail with a spf hardfail even though spf DNs record is set to softfail?

The log output I get is the following: "Jul 7 11:23:46 mail policyd-spf[19779]: 550 5.7.23 Message rejected due to: SPF fail - not authorized. Please see http://www.openspf.net/Why?s=mfrom;id=...
0
votes
1answer
117 views

DMARC appears to fail, multiple DKIM signatures with one matching the from address

I am using a free outlook account. In the outlook account management portal I have added an alias for my custom domain (alias@mydomain.website). With this I am able to send mails from this alias, ...
0
votes
0answers
35 views

DMARC, DKIM, or SPF? Emails going into quarantine

I have never had to deal with DKIM, DMARC, or SPF records before; however, our SPF record is full (10, Cloudflare) and I have a vendor whose emails aren’t making it to our mailboxes. I made ...
0
votes
1answer
224 views

How to stop spammer spoofing my domain for emails

I've scanned all my code and even changed the passwords to my google apps account such that the SMTP password has changed. However, spammers are still sending emails from June24-eBay-USA-contactmsg-...
0
votes
1answer
67 views

DMARC report with passing O365 DKIM signature being sent by Google server

The dmarc report values are as follows: dkim_domain : mydomain.onmicrosoft.com dkim_result : pass selector : selector1-mydomain-onmicrosoft-com header_from : mydomain spf_domain : mydomain spf_result :...
0
votes
1answer
80 views

Unable to send email to gmail account from my mail server

I've created a mail server and have setup a PTR record from the ISP to my static IP server. The mail server works well and am able to send and receive emails and send mails to many email addresses ...
2
votes
1answer
69 views

What problems are there with the SPF ‘ptr’ mechanism?

One of the mechanisms in SPF is ptr. This mechanism checks that a sender using some domain name connects from a (forward-confirmed) IP address pointing to a subdomain of that name. For example, when ...
6
votes
1answer
234 views

What's the benefit of SPF HELO Identity

I'm try to understand the benefit of the HELO Identity defined in RFC7208 (SPF). There is a mail server, let's say mail.example.com. This server is used as relay for different domains. In Section 2.4: ...
0
votes
0answers
42 views

issue with SPF records for website hosted on GCP

I am new to GCP. I have bought a domain from GoDaddy and hosted my website on GCP. My website is built on WordPress. I have contact forms on WordPress and when customer visit my website and leave a ...
1
vote
0answers
201 views

SPF neutral on mail sent with SMTP from Gmail. SPF pass on mail sent from inbox for that address on G Suite

The domain name I'm trying to debug is dallaspetsalive.org. This is a G Suite domain. When I log directly into my G Suite email account for the dallaspetsalive.org address and send an email, I get SPF ...
1
vote
1answer
97 views

DKIM signing for subdomain issue

I am in an environment that sends emails from different sources. We're a Google Workspace environment as well. The flow is as such: A user (test@domain.tld) in Gmail sends an email to an email group (...
1
vote
1answer
202 views

Correct SPF record to avoid softfail for emails sent from domain address using Gmail?

I have a domain address, such as me@example.com, which forwards to Gmail. Gmail is configured to 'send email as' me@example.com, using example.com's SMTP server. Emails sent from Gmail as me@example....
17
votes
2answers
1k views

DNS MX/SPF/DMARC records without actuall emails on domain

I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
1
vote
1answer
74 views

SPF and DMARC - how is the SPF policy used

My domain has a strict DMARC policy (p=reject) and a standard SPF policy with ~all catchall. My email provider is Google Workspace. I received an email spoofing my sender address. It came from 41.174....
21
votes
5answers
3k views

Does DKIM alone not solve the spam issue? Why do I need SPF?

FINAL EDIT : I was completely wrong about DKIM it seems, the signing domain does not have to be the same as the sender domain, thus the whole premise for my question is flawed. A lot of thanks to Paul ...
0
votes
0answers
97 views

Allowing Messages from IP Address DMARC

I'm still learning infrastructure stuff and need to ask a question which relates to DMARC. A user in the organisation has an app which is sending marketing messages to staff within the business. The ...
0
votes
1answer
41 views

Is everything OK based on this DMARC report?

Do I understand it correct that everything is OK and I have both SPF and DKIM configured correctly based on this report from Google? <?xml version="1.0" encoding="UTF-8" ?> &...
0
votes
2answers
54 views

Is possible to use keywords a, mx and include together in SPF?

Is it possible to use them in the same SPF record? For example: Value TXT: v=spf1 mx a ptr ip4:46.16.60.0/23 a:cdmon.com mx:mail.solarmora.com include:srv.cat ~all
0
votes
2answers
50 views

Purpose of a and include keywords in SPF

In tutorial I found this example record for SPF, but the a and include keywords wasn't explained. I don't find accurate information about them in the internet. v=spf1 mx a ptr ip4:46.16.60.0/23 a:...
9
votes
4answers
2k views

SPF record -- why do we use `+a` alongside `+mx`?

Why do administrators mostly use +a alongside +mx in SPF records? This is the example: @ 10800 IN TXT "v=spf1 +a +mx -all" Isn't it enough to only use +mx parameter e.g.: @ ...
0
votes
1answer
334 views

SPF and OpenDMARC not working in Postfix

I am working on implementing SPF and OpenDMARC/DKIM to my mail servers. Currently I have two mail servers in different subnets, each with separate DNS server and domain name. They can exchange emails ...
37
votes
6answers
3k views

Are SPF records legacy?

I am responsible for a domain which has an SPF record as recommended by various other services that send mail on this domain's behalf. When setting up Mailchimp, I was surprised to find no ...
5
votes
1answer
189 views

Is email deliverability impossible with a .name email address?

I have a dot name domain. .name is an odd TLD: they originally only offered third level domains, eg first.last.name, so that more people could get their own name. They also included the first@last....
0
votes
2answers
348 views

DNS MX record and SMTP server

I have a SMTP server. DKIM is setup and working and have also setup SPF. The SMTP host is smtp.domain.com On the DNS I have a A record with smtp pointing to the IPv4 and a AAAA record with smtp ...
1
vote
1answer
51 views

Add SPF record for multiple systems in different servers

I have a domain with a published SPF record (v=spf1 a mx ip4:xx.xxx.xxx.25 ~all) for it (e.g: xyz.com) also this domain has four subdomains: sub1.xyz.com xx.xxx.xxx.29 sub2.xyz.com xx.xxx.xxx.30 ...
0
votes
1answer
299 views

SPF SOFTFAIL domain of transitioning XX@company.com does not designate X.X.X.X as permitted sender)

in my company I have the following error. softfail (google.com: domain of transitioning someone@company.com does not designate X.X.X.X as permitted sender) client-ip=X.X.X.X; Let's say my mail....
1
vote
1answer
556 views

Forward messages to Gmail (postfix+SRS) has DMARC failure even though SPF and DKIM succeed

I run my own domain, but forward many email addresses to my gmail account. Recently, I started seeing a lot of messages marked by gmail as spam. I have SPF set for my outgoing email, and use SRS to ...
0
votes
2answers
226 views

Email protected with SPF but received valid signature from other IP anyway

I've received an email in spam from info@mydomain.com to info@mydomain.com, but the "sent by" came from rec15.appleandrdoidmail.mx. info@mydomain.com is an alias. Weird thing is that it says ...
0
votes
2answers
582 views

AWS SES requirements on custom MAIL FROM domain

According to the docs, AWS SES has some requirements on what is an allowable MAIL FROM domain: The subdomain you use for your MAIL FROM domain has to meet the following requirements: The MAIL FROM ...
0
votes
3answers
79 views

SPF problems with sending email from website

I've been struggling to understand how to fix a particular problem with setting up SPF with different domain names. I tried searching the web, but didn't quite find what I was looking for. My problem ...
0
votes
1answer
61 views

How does Dmarc alignment protect against anything?

I am specifically referring to Dmarc SPF alignment. To get a Dmarc pass result, all it takes is that either SPF or DKIM aligns. Let us say that I am an attacker, and try to impersonate abc.com. I have ...
-1
votes
2answers
90 views

Some clear instructions on writing the DMARC record

I have been under some pressure to produce the DMARC record for one of our customers. Unfortunately, they do not give me access to the domain vendor and instead repeatedly ask "What should they ...
-2
votes
1answer
276 views

My OpenDMARC is rejecting emails from firefox.com . Is their SPF record correct? Or am I wrong?

Why is opendmarc rejecting mail from firefox.com? It looks like their SPF record matches their sending address and does pass: v=spf1 mx a include:amazonses.com include:mail.zendesk.com -all /var/log/...
3
votes
1answer
1k views

record DKIM on IONOS makes sense?

If I am sending mail through SMTP, I understand that it is IONOS who signs those emails, right? I would like to add the DKIM header to my emails. I know that it is necessary to publish a CNAME record ...
1
vote
1answer
57 views

Understanding SPF fails for email sent

I'm trying to get my head around this issue. My emails are getting sent into spam for people. In this case, its gmail. If I look at the email details I get: 109.74.201.130 is another server, which ...
0
votes
1answer
77 views

SPF and DKIM for one domain on two servers [closed]

I followed this guide to setup SPF and DKIM for emails to be sent from a server for a domain. That server is the location of the actual email server for the domain. I now want to setup another server ...
0
votes
1answer
1k views

emails to Yahoo are ending up in SPAM folder despite spf=pass, dkim=pass and dmarc=pass

Are we possibility having a reputation problems with Yahoo emails? Yahoo raw mail header finds my policy I published: dmarc=success(p=REJECT,sp=REJECT) Emails to clients at Google and Outlook are not ...
2
votes
1answer
281 views

Why is opendmarc SPF failing this arriving message?

Why is this incoming message failing? postfix/smtpd[4776]: connect from mail-mw2nam10on2073.outbound.protection.outlook.com[40.107.94.73] postfix/smtpd[4776]: Anonymous TLS connection established ...
0
votes
1answer
242 views

All mails to Yahoo are deferred or in spam

i have read a lot about the problems of delivering mail to yahoo.com, i have contact the tech support but the result it's always the same: from my server all mails to yahoo./aol. are deffered and when ...
1
vote
1answer
339 views

Is SPF alignment important with DMARC?

When setting up a DMARC policy for an organization, is it important at all to have SPF alignment? I've gathered that: Most email service providers support DKIM for a custom domain. Not all email ...

1
2 3 4 5
16