Questions tagged [spf]
Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.
898
questions
1
vote
2
answers
724
views
Email FROM header authentication using subdomain delegation
Our company owns the domain somecompany.com and uses an external email provider emailemailprovider.com to send emails. The email provider recommends to delegate a subdomain for them to automatically ...
- 261
0
votes
0
answers
222
views
Are email services looking at the "From address" along with the envelope sender when doing SPF lookups?
First, I understand the caveats and flaws of SPF as an aging authentication technology, and understand that it should be used in conjunction with DKIM and DMARC and is not a panacea for deliverability....
0
votes
1
answer
3k
views
550 2607:f8b0:4864:20::132 is not allowed to send mail from [duplicate]
When I try to send an email I get the following error:
550 2607:f8b0:4864:20::132 is not allowed to send mail from
mydomain.com. Please see the SPF record, with scope mfrom, identity
myuser@...
- 131
0
votes
1
answer
66
views
How to merge multipe spf1 records to one?
My question is rather specific than the answers I found. I know a merge record could be something like this:
TXT "v=spf1 include:mailgun.org include:_spf.google.com ~all."
But in my case my spf1 ...
0
votes
1
answer
2k
views
How to add additional IP's to SPF record along with Google Apps SPF
My current SPF record looks like:
v=spf1 include:_spf.google.com ~all
I'm trying to add some extra IP's to this record (for our shipping system, that emails out form our domain). The issue is that ...
- 1,184
2
votes
2
answers
2k
views
postfix-policyd-spf-python - spoof protection - spf checks FAIL but no action taken - why?
I've installed postfix-policyd-spf-python and configured the postfix integration according to the docs.
This is my policyd-spf.conf config file:
debugLevel = 1
TestOnly = 0
HELO_reject = ...
- 345
1
vote
1
answer
940
views
DMARC Report: Sometimes DKIM Fails for Mail Server IP
What does it mean when some DMARC records indicate a failure for the correct server:
<record>
<row>
<source_ip>1.2.3.4</source_ip>
<count>8</count&...
- 785
1
vote
1
answer
1k
views
SPF and IPv6 fails even if the reverse DNS is created
When sending mails to Gmail I get this error
Received-SPF: fail (google.com: domain of [email protected] does not
designate 2a01:4f8:xxx::2 as permitted sender)
client-ip=2a01:4f8:xxx::2;
When I ...
- 2,055
0
votes
0
answers
611
views
everything Pass but emails still go to the spam folder! I think it would be about hostname but not sure and don't know how to fix this
I checked too many topics and answers tested too many things! but can't find a solution to my problem. I'm a newbie user and maybe didn't understand some answers well.
I need to fix this problem as ...
- 1
0
votes
2
answers
1k
views
SPF record for SMTP server
I am trying to set up my SPF records to take into account that I send emails via office365 directly in Outlook etc. as well as in a web app hosted in AWS which sends email to smtp.office365.com (...
2
votes
3
answers
4k
views
Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com
I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? ...
- 14.4k
0
votes
0
answers
36
views
DKIM and SPF for Different Server [duplicate]
My situation like the following:
Web server hosted in Google Cloud with domain name lets say: example.com
Mail server hosted in Linode (lets say in server name: server.myserver.com) using cPanel with ...
- 1
0
votes
2
answers
860
views
Postfix mail relay to external address, SPF Check
I have a question which is not about the configuration but about the question what is right and what not.
The scenario:
Organisation A (OrgA) has a Mailserver which is responsible for example.org. ...
- 135
6
votes
2
answers
1k
views
Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?
I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
- 61
3
votes
1
answer
192
views
SPF: Is ?all safe, and is it any different from having no policy at all?
A company I started working with had no SPF records on their domain. They are using multiple services (Google Apps and Shopify) that are sending e-mails from the company's domain with the company's ...
- 135
0
votes
2
answers
182
views
Which IP is SPF checks checked against
I am trying to work out which IP to put into an SPF record. I understand that SPF will extract the domain from return-path, So i guess SPF check will then do a DNS lookup to find the SPF record for ...
- 33
1
vote
1
answer
455
views
Join multiple SPF in one string
I've read other thread about it but I've 2 different string with some parameters in only one (MX) so i ask some help to join in one string only in the correct way.
1) "v=spf1 include:spf.sendinblue....
- 13
0
votes
1
answer
591
views
How did this pass DKIM according to DMARC report?
I recently added a DMARC record for one of my domains. Let's call it mydomain.com:
v=DMARC1;p=none;rua=mailto:[email protected];ruf=mailto:[email protected];fo=1"
I have been ...
- 689
1
vote
1
answer
110
views
DKIM & SPF records should be on the sender email domain or on the smtp domain?
I have two(2) vps servers. One of them hosts my website and the other has Postfix installed on it.
VPS[1]: websitedomain.com
VPS[2]: postfixdomain.com
I am using smtp.postfixdomain.com to send an ...
- 23
0
votes
2
answers
846
views
Further understanding of SPF, DKIM, and DMARC
I've been trying to wrap my head around some of the information I've gathered online, and I was hoping for some clarification.
We are using Office 365, for our email server.
A.) Are SPF records and ...
- 209
0
votes
1
answer
4k
views
Proper SPF record
Our company emails are usually treated as spam. When we checked our score on Spamassassin, our score was pretty bad, 3.3 and the main reason was our SPF record.
We would like to update our SPF record ...
- 19
1
vote
1
answer
595
views
Make my outgoing SPF records strict, and incoming policy lenient (postfix/dovecot)
I recently added an SPF record to my DNS records, so my email is less likely to be marked as spam.
My SPF record looks like this:
mpn.co. 86400 IN TXT "v=spf1 ip4:45.56.81.114 ip6:2600:...
- 121
2
votes
2
answers
8k
views
How to read this DMARC report? Why does Yahoo still reject mails from my server?
I've got hMailServer set up on my server, which bulks-mails a newsletter to an opt-in subscriber base. I have set up DKIM signing, a SPF record explicitly giving my server permission to send email on ...
- 273
1
vote
1
answer
977
views
Gsuite DMARC SPF Setup Failure
I'm using Gsuite with our own domain name "audacy.space". I've setup DMARC, DKIM and SPF, and both DMARC Analyzer and Google's Mx Tool report no problems for the domain. However, our weekly DMARC ...
- 11
0
votes
2
answers
919
views
Emails fail DMARC check despite having the sender IP in SPF
I have the following DMARC record set up:
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; fo=0:1:d:s
I have the following SPF record set up:
v=spf1 mx -all
the ...
0
votes
1
answer
665
views
dmarc. Why do I receive failed SPF or DKIM authentication reports for forwarders?
I set _dmarc to see my email authentication reports (in case it fails).
like that
"v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected]"
And I receive these reports form Google.
a ...
1
vote
2
answers
1k
views
SPF authentication mixed pass/fail without SPF record, in DMARC report [duplicate]
I have attached a DMARC report for my domain (this one sent from google). It correctly shows only mail sent from my mta (amazon ses) as passing the DMARC compliance. And the DKIM portion also shows ...
- 1,852
0
votes
0
answers
325
views
Mail issues only with Google App domains
I have a local mail server set up. It is connected via a dedicated IP (with an appropriate PTR record). I have DKIM, DMARC, and SPF set up.
My domain has been added to Google's Postmaster Tools and ...
- 153
1
vote
1
answer
3k
views
SPF record longer than 255 characters in AWS Route53
I saw that there's been a couple questions on here that ask the same thing. However, personally, I don't grasp the hint provided. Yes, I've seen https://kb.isc.org/docs/aa-00356 and it only made ...
- 113
0
votes
2
answers
443
views
SPF records for a company with traveling (or remote) employees
I'm trying to set up a SPF record for the domain of a company whose employees use all sorts of SMTP servers..
But I think that line already contradicts itself ? Is this a problem ?
They use several ...
- 183
1
vote
1
answer
1k
views
How to build "SPF" ( multiple IPs) for authorizing other domains for sending mails behalf of them
We are building mail server to send mails for other domains.
We have multiple IP address and i have created "A" record like spf.example.com pointing to multiple IP's
Now I have asked client to ...
- 13
1
vote
1
answer
859
views
SPF passes when sending email to external recipient, but fails when sending to internal recipient
I have set up an SPF DNS record for our domain. I've used our external IP address and that seems to be working fine, when I email to external recipients from my Outlook, SPF passes, since the ...
1
vote
1
answer
1k
views
Azure DNS does not lookup SPF policies for certain domains
I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures.
Without going into the security things, today I noticed ...
- 2,367
1
vote
1
answer
4k
views
How to build a whitelist of domains we ignore SPF check for in Postfix
My question would seem to be the opposite of How to setup postfix to check SPF record only for domains that i want to check -
How would I go about modifying my Postfix server so that it checks SPF ...
- 6,322
2
votes
2
answers
14k
views
Postfix - Recipient Address Rejected on Incoming Mail Only
I am working on building a secure mail server for the first time using Postfix and Dovecot and I have encountered a problem that I cannot surpass.
To avoid the email delivery in the spam box of ...
- 121
4
votes
1
answer
1k
views
Sending email using a third-party smtp requires an mta?
I have a G Suite account and want to use the Google's SMTP to send out emails from my server.
How can I then send emails from Linux's CLI? I read with some research that I need a program such as ...
- 213
5
votes
3
answers
581
views
Can MTA send mail via a relay without being told so?
I'm thinking of adding an SPF to a domain. So I'm concerned if there are circumstances under which my MTA would use some relay when sending mail. Like, when the destination servers are too busy or ...
- 2,328
1
vote
3
answers
5k
views
SPF setup for mail and relay server
So I am quite new to mail servers and looking for help with setting up SPF properly for this environment:
mailserver (IP 11.11.11.11, example.com, random.com, test.com)
relay server (IP 22.22.22.22,...
- 17
0
votes
1
answer
2k
views
spf header information, namely Pass(mailfrom), identity, and receiver=<UNKNOWN>
Is it possible, and how would I go about setting header information for my SPF implementation.
It seems to work Ok. I see the SPF header on emails received from different email addresses. However, ...
- 21
0
votes
1
answer
799
views
Postfix warning: dns_get_fixed
I have a recently setup Postfix/Dovecot simple mail server (if there is such a thing).
It was stable, and worked without issue for about 2-3 weeks, until I wanted to get SPF setup. Now, it still ...
- 21
1
vote
1
answer
1k
views
SPF errors when sending emails
I setup a mail server on mail.mydomain.com. I am able to receive email. Problem occurs when i try to send an email. I have two servers:
mail.mydomain.com - which is on different ip (e.g. 1.1.1.1)
...
- 125
1
vote
1
answer
500
views
You apparently created more than one SPF record on your DNS
I am getting this error from mail tester
What we retained as your current SPF record is:
v=spf1 include:sparkpostmail.com ~all
More information about this error:
You apparently created more than ...
- 1,459
4
votes
1
answer
505
views
SPF - how is it useful if the receiver only verifies the MAIL FROM address?
If I understand correctly, the email receiver checks the validity of the origin of the email by matching the domain's IP of the MAIL FROM (Return-Path) address with the IPs listed in the domain's SPF ...
- 213
0
votes
1
answer
1k
views
how to add spf record without ip
I am using a whm server which send default emails to me for any task(cron) executed but recently gmail started blocking my emails for not having spf record.
the dns of hostname i am using on server is ...
- 9
1
vote
2
answers
319
views
Is this correct for a SPF record based on our setup?
Our company has a SMTP server that sends mail out on behalf of our customers. So a customer would log into our system, go to a specific section, and can fill out a form to send an Email to whoever ...
- 209
5
votes
2
answers
5k
views
`connect to private/policy-spf: No such file or directory` when receive mail by postfix in centos 7
My system is centos 7 with postfix,dovecot,pypolicyd-spf, opendkim.
I can send mail but cannot receive mail,
I notice warnings as below:
Feb 6 20:01:09 srv-8327 postfix/smtpd[20391]: warning: ...
- 985
0
votes
1
answer
2k
views
How can I create a DKIM Record?
I am not sure how to add a DKIM Record to my mails/server. Do I only have to generate it from here -> https://dkimcore.org/tools/keys.html and add it to my DNS?
- 133
-1
votes
1
answer
327
views
I have set the DKIM record but my emails is not signed?
I have set the DKIM record on my DNS server provider (Cloudflare) and i tested it using different online tools which all says that my dkim record is valid but all my messages i sent dont have DKIm ...
2
votes
1
answer
381
views
DMARC <policy_evaluated> SPF fails when using PostSRSD
I am running a mailserver under example.com that serves emails for a couple of domains. As my server does not have a mailbox, all the emails it receives are forwarded to particular Gmail accounts. To ...
- 365
0
votes
1
answer
567
views
Combine 2 spf records into 1
I have 2 spf records for my email example.com
The first one is from my hosting provider. I DO send and receive email through my hosting provider. Emails from here do not go to spam.
"v=spf1 ?include:...
- 115