All Questions
346
questions
0
votes
2
answers
55
views
How to put a No-ip dns in SPF
I want to whitelist my No-Ip DNS on my SPF record because sometimes it gets targeted as spam because is not listed in permitted senders.
Reading the No-Ip FAQ, it says that I have only to put include:...
0
votes
1
answer
169
views
SPF failing even though source IP is in the SPF record
I've seen (and think I understand) when DMARC checks fail on SPF because, e.g. the email has been forwarded and such like. But I don't think this is the case here. All checks on sites like MXtoolbox ...
- 335
0
votes
1
answer
184
views
Adding SPF records when using both Google Workspace and SendGrid
I previously didn't have any SPF set up on my domain. I use Google Workspace. I now use the SendGrid API.
This is what I set as the SPF record
v=spf1 include:_spf.google.com include:_mailcust.gandi....
- 101
-1
votes
1
answer
88
views
Phishing email but with SPF, DKIM and DMARC in "PASS" status
I received an email from a company that looked fine. Gmail deemed it ok. I checked the domain and the various DMARC, DKIM and SPF headers: they are all in "PASS" status. The sender's IP also ...
- 47
1
vote
1
answer
1k
views
Is it a good idea to add `calendar-server.bounces.google.com` to my SPF record?
I'm trying to maximize my company's email deliverability and DMARC reports tell me we are failing DMARC SPF alignment with calendar-server.bounces.google.com which I suspect is the email server ...
3
votes
1
answer
1k
views
SPF record in DNS sending via Gmail
I have an old domain that I want to re-purposes for a new website which will send emails. I'm using Asp.Net Core, if that makes a difference (I do not think it does). I've written several apps that ...
- 131
0
votes
2
answers
150
views
A Non-MX mail server + Google Workspace, is this viable?
I have a domain (example.com) configured for sending and receiving mail using Google Workspace. I need to launch additionally a separate (own) mail server. Switching completely to the new server is ...
- 2,328
0
votes
1
answer
947
views
Should HELO, MAILFROM and From use the same domain?
I configured a mail server a couple of times before and I believe back then I thought
that the answer is "yes."
But I'm about to configure another one, and it seems that I was wrong. Let's ...
- 2,328
1
vote
2
answers
420
views
Email message headers pass SPF check after failing earlier SPF checks. Will this result in spam?
I have an issue where email is being marked as spam by Gmail/Google Apps systems.
When reading the mail headers, the most recent SPF check in the mail chain passes, but earlier checks fail. That is, ...
- 181
0
votes
0
answers
82
views
Change mail from header in sendmail
We have two separate RTs (request trackers) configured on one server. They both are configured to send the emails through sendmail.
We are trying to configure now SPF and DMARC records for these DNS ...
0
votes
2
answers
582
views
Spammers slipping through SPF
One of the subscribers on the mailhost I run has been receiving scads of spam mail "from himself." With SPF set up and validated on the domain (wickenburg.us) this should not be happening. ...
0
votes
1
answer
1k
views
Gmail adds multiple SPF records
When I connected my domain to gmail, it added two records to my DNS:
TXT
@
v=spf1 include:dc-aa8e722993._spfm.mydomainhere.com ~all
TXT
dc-aa8e722993._spfm
v=spf1 include:_spf.google.com ~all
But ...
- 103
1
vote
1
answer
557
views
Is it still possible to use a catch-all email forwarder to gmail, and how?
Since ever, I've been using a catch-all email forwarder at a domain I hold, *@mydomain.net, and sending the email to my personal gmail account, [email protected]. I've just been ousted from my domain ...
0
votes
2
answers
2k
views
SMTP Relay - Keep sender SPF valid
We use a email setup (incoming mails) in the following order:
Internet -> on premises mailserver (=> attachment filter, antivirus, spam filter) -> forward to Microsoft 365 Exchange Online ...
0
votes
2
answers
415
views
Root domain in SPF record instead of full hostname
Can i use root domain like google.com instead of _spf.google.com in SPF record?.
My SPF record
v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com include:mxsmtp.sendpulse.com +a +mx ~all
...
2
votes
1
answer
741
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 63
1
vote
0
answers
177
views
SPF Limits and SPF Merging
I am using Zoho Mail, AWS SES, GMAIL SMTP, Cloudflare email route and Yahoo SMTP. they all have there own SPF record. i saw on Google the only 1 SPF should be added in hostname and maximum 10 SPF ...
- 189
0
votes
2
answers
99
views
Mail Validation: SPF qualifier ?all
How do mail servers (i.e. MS Exchange) handle the ?all option at the end of an SPF record?
I know from RFC 7208 that ? results in a neutral response. It means the SPF explicitly doesn't state whether ...
- 1
1
vote
1
answer
3k
views
SPF Error - Cannot send emails to @gmail users
I get the following error, every time I tried to send an email to a gmail user.
Error:"This is the mail system at host chimaera.otenet.gr.
I'm sorry to have to inform you that your message could ...
- 11
0
votes
1
answer
56
views
Are SPF records checked depth first or breadth first (or something else)
We have a domain which has 11 includes; so is failing SPF validation as it's gone over the limit.
Most of the lookups are for third party resources, so flattenning the SPF record isn't ideal; we'd ...
- 1,344
0
votes
1
answer
662
views
Email goes to spam even with valid SPF, DKIM and DMARC records, dynamic rDNS on AWS instance
I have an instance on AWS and fighting with sending emails through cPanel.
All records are OK (checked on MX toolbox): SPF, DKIM, DMARC at the cPanel level and the WHM level (hostname). Even rDNS is ...
- 101
0
votes
1
answer
108
views
Managing SPF with multiple users on an email provider
I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
- 9
1
vote
3
answers
501
views
SPF FAIL but DKIM PASS with my own domain
I do not understand the fail results in the following google DMARC report to our domain.
I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes?
<...
- 11
2
votes
1
answer
927
views
DKIM & SPF Allignment for Subdomains
We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
- 131
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
- 1,305
0
votes
1
answer
1k
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
1
vote
1
answer
2k
views
How to configure EXIM to check SPF record for incoming emails and add 'Received SPF' header to the incoming emails?
I'm playing with Exim and created a mail server that can accept and send emails alright. Now, I want to enable SPF checking for every incoming email so that a Received SPF header is added to these ...
1
vote
1
answer
5k
views
Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record
My environment: hMailServer 5.6.8 on Windows Server 2022 Standard
Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
- 133
8
votes
3
answers
1k
views
Does SPF provide benefits along with DKIM+DMARC?
I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming ...
- 181
1
vote
3
answers
92
views
Meaning of "sender"?
Reading documentation about SPF records, I can't quite seem to disambiguate the meaning of "sender". It could mean "the IP where the mail client sent the message" or it could mean &...
- 145
0
votes
0
answers
176
views
postfix to gmail silent delivery failure
With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
- 131
17
votes
3
answers
8k
views
SPF/DKIM/DMARC for Gmail "Send mail as" via smtp.gmail.com on external domain
Since "Google Apps" / "Google Apps for business" / "G-Suite" / "Google Workspaces" free tier is being discontinued, I need a solution to migrate my ~30 extended ...
- 279
1
vote
2
answers
2k
views
SPF Records: Outlook shows fail, Google shows pass
I am using Office 365 for emails, and have configured the DNS SPF record as:
v=spf1 include:spf.protection.outlook.com ~all
When I send emails to Google recipients, the email headers show Received-SPF:...
- 111
3
votes
1
answer
2k
views
How is this email passing DMARC?
Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.)
This is disturbing, as it shows as "from foo.com", yet the sender ...
2
votes
1
answer
2k
views
Why do I get DMARC aggregate reports with no reported failures (G Suite + Amazon SES)?
Domain: franzoni.eu
Such domain leverages G Suite (grandfathered free version) for receiving mail, but for various reasons (I prefer not to create users for M2M SMTP on G Suite, and I cannot use SMTP ...
- 163
1
vote
2
answers
886
views
How to configure DNS SPF records for many subdomains
I have a domain name, say example.com, and many servers (potentially hundreds), each with a public IP and a sub domain (sub1.example.com, sub2.example.com, etc.).
Each server hosts a Postfix ...
0
votes
1
answer
841
views
SPF/DKIM setup for a registrar's email forward
I have a number of domains with a registrar with straight forward forwards to another email address.
The system has worked flawlessly for a lot of years over a lot of domains but recently I created a ...
2
votes
1
answer
166
views
What's the endpoint running at `include:spf.example.com` as seen in an SPF record in DNS?
How can I run an SPF include endpoint for my organisation?
In this example, the SPF record for a domain permits hosts included via the spf.example.com list, and prohibits everything else:
"v=spf1 ...
- 123
1
vote
1
answer
237
views
SPF/DKIM and sending emails from parent domain
I'm trying to understand how apps such as greenhouse.io configure DNS for delegating email sending.
In short, assume I am a SAAS provider saas.com and my customer is customer.com. I've seen that it is ...
- 111
5
votes
1
answer
6k
views
why is this DMARC failing verification?
I get a 6.1/10 score on mail-tester.com, where the DMARC verification is the only relevant penalty (-3).
* Your DKIM signature is valid
* Your message failed the DMARC verification
A DMARC policy ...
- 153
1
vote
1
answer
1k
views
Why does my postfix reject mail with a spf hardfail even though spf DNs record is set to softfail?
The log output I get is the following:
"Jul 7 11:23:46 mail policyd-spf[19779]: 550 5.7.23 Message rejected
due to: SPF fail - not authorized. Please see
http://www.openspf.net/Why?s=mfrom;id=...
- 21
0
votes
1
answer
370
views
How to stop spammer spoofing my domain for emails
I've scanned all my code and even changed the passwords to my google apps account such that the SMTP password has changed. However, spammers are still sending emails from June24-eBay-USA-contactmsg-...
- 302
-1
votes
1
answer
4k
views
Unable to send email to gmail account from my mail server
I've created a mail server and have setup a PTR record from the ISP to my static IP server. The mail server works well and am able to send and receive emails and send mails to many email addresses ...
- 109
1
vote
0
answers
989
views
SPF neutral on mail sent with SMTP from Gmail. SPF pass on mail sent from inbox for that address on G Suite
The domain name I'm trying to debug is dallaspetsalive.org. This is a G Suite domain.
When I log directly into my G Suite email account for the dallaspetsalive.org address and send an email, I get SPF ...
1
vote
1
answer
844
views
DKIM signing for subdomain issue
I am in an environment that sends emails from different sources. We're a Google Workspace environment as well.
The flow is as such:
A user ([email protected]) in Gmail sends an email to an email group (...
- 11
2
votes
1
answer
2k
views
Correct SPF record to avoid softfail for emails sent from domain address using Gmail?
I have a domain address, such as [email protected], which forwards to Gmail.
Gmail is configured to 'send email as' [email protected], using example.com's SMTP server.
Emails sent from Gmail as me@example....
- 121
17
votes
2
answers
3k
views
DNS MX/SPF/DMARC records without actuall emails on domain
I created website for someone, but also someone (I guess some SEO guy) told this person that I made big mistake because there are missing DNS records on domain (mx, SPF, dmarc). Now I need to "...
- 273
25
votes
5
answers
8k
views
Does DKIM alone not solve the spam issue? Why do I need SPF?
FINAL EDIT : I was completely wrong about DKIM it seems, the signing domain does not have to be the same as the sender domain, thus the whole premise for my question is flawed. A lot of thanks to Paul ...
- 521
0
votes
2
answers
753
views
Is possible to use keywords a, mx and include together in SPF?
Is it possible to use them in the same SPF record? For example:
Value TXT: v=spf1 mx a ptr ip4:46.16.60.0/23 a:cdmon.com mx:mail.solarmora.com include:srv.cat ~all
- 473
0
votes
2
answers
912
views
Purpose of a and include keywords in SPF
In tutorial I found this example record for SPF, but the a and include keywords wasn't explained. I don't find accurate information about them in the internet.
v=spf1 mx a ptr ip4:46.16.60.0/23 a:...
- 473