Questions tagged [spf]
Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.
898
questions
7
votes
1
answer
445
views
Which has bigger priority between DMARC and SPF?
First off let me start by saying I understand DMARC and SPF do not do the same thing.
However both have an option to tell the receiving servers what to do with mails that do not pass SPF (and DKIM in ...
- 173
0
votes
0
answers
379
views
postfix configuration to prevent bounces when relaying to 3rd party (e.g. src -> my@work -> my@gmail)
i have an active mail relay that is using aliases as a main tool,
at some point we started to get bounces for some emails.
Source: somerandomsenderdomain.com
Destination: myemaildomain.com
...
0
votes
1
answer
226
views
Need to Add SPF Record
We had the warning about spf containing to many lookups. Deleted
txt ourdomainname.com v=spf1 ip4:50.87.253.89 a mx include:websitewelcome.com ~all as we are no longer on bluehost which the ip ...
- 1
0
votes
2
answers
415
views
Root domain in SPF record instead of full hostname
Can i use root domain like google.com instead of _spf.google.com in SPF record?.
My SPF record
v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com include:mxsmtp.sendpulse.com +a +mx ~all
...
0
votes
2
answers
377
views
SPF record not getting recognized for mail server domain?
I'm currently attempting to setup a mail server on Debian.
So far I've installed postfix and opendkim. I've also configured an FQDN, rDNS, DKIM, DMARC, and SPF, but the latter doesn't work somehow.
An ...
- 59
2
votes
1
answer
741
views
How do i receive DMARC reports with external domains that i have no permission to control
I want to receive reports with gmail or outlook or anything else that i have no permission to add (mydomain.com)._report._dmarc.(gmail|outlook).com as a record. What i can do?
Example just like:
v=...
- 63
1
vote
0
answers
177
views
SPF Limits and SPF Merging
I am using Zoho Mail, AWS SES, GMAIL SMTP, Cloudflare email route and Yahoo SMTP. they all have there own SPF record. i saw on Google the only 1 SPF should be added in hostname and maximum 10 SPF ...
- 189
0
votes
2
answers
99
views
Mail Validation: SPF qualifier ?all
How do mail servers (i.e. MS Exchange) handle the ?all option at the end of an SPF record?
I know from RFC 7208 that ? results in a neutral response. It means the SPF explicitly doesn't state whether ...
- 1
0
votes
1
answer
750
views
Bind9 one spf record for all zones
I want to create one include with SPF IP address to be used from all dns zones in my server. Can you suggest me how to do it? I work on BIND9. Thank you.
1
vote
1
answer
359
views
I setup DMARC p=reject on server but now I can't send via gmail to gmail (using server email From address)
Did I shoot myself in the foot ?
I mainly use gmail to send and receive emails. Support etc. My default 'send email as' profile is not the gmail address itself but an address on my server (also the ...
- 113
3
votes
0
answers
907
views
Set SPF to send email using Gmail
(Disclaimer: I totally suck at being a sysadmin)
I am sending email for a domain using Gmail. The domain is partyboatcharters.com.au (I hope I am allowed to put domains here). Gmail is configured to ...
- 807
1
vote
1
answer
3k
views
SPF Error - Cannot send emails to @gmail users
I get the following error, every time I tried to send an email to a gmail user.
Error:"This is the mail system at host chimaera.otenet.gr.
I'm sorry to have to inform you that your message could ...
- 11
0
votes
1
answer
226
views
How to proper dns zone config for selfhosted email server
Looking to harden the sending authentication of my email server, I am looking for some usefull hints on the topic.
As I have in total 4 Vps Servers where emails will be send from, registration ...
0
votes
1
answer
56
views
Are SPF records checked depth first or breadth first (or something else)
We have a domain which has 11 includes; so is failing SPF validation as it's gone over the limit.
Most of the lookups are for third party resources, so flattenning the SPF record isn't ideal; we'd ...
- 1,344
1
vote
2
answers
343
views
Should we enhance DMARC to allow aligned DKIM enforcement?
Currently, DMARC only requires aligned DKIM or SPF.
However spoofing SPF is relatively simple for an experienced hacker:
You should only control a single IP address in the often large SPF range of e-...
- 121
1
vote
2
answers
207
views
I don't understand DMARC reports regarding my policy
My DMARC settings seems to not work as expected.
First, a few things to note:
The domain is mydomain.com (not the real one obviously) ;
The domain and mail provider is gandi.net ;
I use Amazon SES to ...
- 115
0
votes
0
answers
457
views
configure iis6 smtp server to send from a specific IP
We have a dedicated Windows 2016 server that hosts multiple websites. Each site uses the IIS6 SMTP server to send emails from the websites (enquiries, order confirmations, etc.) - each site has a ...
- 1
5
votes
2
answers
2k
views
Forwarding to Gmail account via Postfix: SPF record with a hard fail
I run a Postfix server which forwards one address to a gmail address.
# /etc/aliases
localuser: [email protected]
This works since several months. But if a sender has a SPF record with a hard ...
- 3,893
0
votes
0
answers
90
views
Correct SPF record
I have been asked to apply DMARC protection to a domain. Part of this requires me to add an DNS record to the domain management console, however I have come across a stumbling block. The DMARC checker ...
1
vote
2
answers
697
views
Managing DNS lookup limit of SPF for a domain with many sending email services
I am webmastering for a sports association, and I would need to set up SPF records for the club's domain. However, I'm exceeding the 10 lookup limit, and would need guidance how to best resolve the ...
0
votes
1
answer
662
views
Email goes to spam even with valid SPF, DKIM and DMARC records, dynamic rDNS on AWS instance
I have an instance on AWS and fighting with sending emails through cPanel.
All records are OK (checked on MX toolbox): SPF, DKIM, DMARC at the cPanel level and the WHM level (hostname). Even rDNS is ...
- 101
0
votes
1
answer
108
views
Managing SPF with multiple users on an email provider
I'm using Ipower for web and email hosting. I was recently made aware that SPF and DMARC were set to neutral, causing all of our outgoing emails to go to spam. I updated both records and they worked ...
- 9
0
votes
1
answer
93
views
How to set spf record to let my 2 server send mail by my domain?
Hi I'm using a directadmin server's hosting.
when my website send mail by php, it will use [email protected] to send email out
but mydomain.com's email is hosting by google workspace
I was set to
v=...
- 1
7
votes
3
answers
2k
views
Strange characters appearing in some DNS checkers, but not others for DKIM and SPF, possibly causing DMARC to fail
Emails sent from all 3 email addresses I have set up in the Rackspace Cloudways Add-On are ending up in Spam in GMail.
When I "View Original Message" in GMail, I see...
SPF: NEUTRAL with ...
- 181
1
vote
0
answers
127
views
Postfix after-queue content filter
I am running a postfix/dovecot/spamassassin/clamav system on Debian 10 with Postfix 3.5.13 for my domains. One domain has a small private mailing list. If someone writes to the list postfix prepends ...
- 11
1
vote
3
answers
501
views
SPF FAIL but DKIM PASS with my own domain
I do not understand the fail results in the following google DMARC report to our domain.
I understand that the SPF fails because the IP address is not ours but if so, how come DKIM passes?
<...
- 11
0
votes
1
answer
93
views
SPF include a main domain & its subdomains
I need to configure SPF using ( include ) for one domain and its subdomains too at the same time
Example :
domain1.com has SPF for main domain + 4 subdomains
domain1.com has spf v=...
2
votes
1
answer
927
views
DKIM & SPF Allignment for Subdomains
We have a primary domain name example.com that has both adkim=s and aspf=s defined in its DMARC policy. Now, we have multiple subdomain names for this primary domain, such as postman.example.com. The ...
- 131
0
votes
1
answer
865
views
Publishing Exchange Server public IP address in a hybrid Exchange setup?
I'm currently using the Hybrid Exchange Online and Exchange Server OnPremise setup.
I have included the IP addresses of all my Exchange Servers in the below TXT record, I wonder if it is really ...
- 1,305
2
votes
1
answer
4k
views
DMARC record is valid, but your domain's None/Quarantine policy does not yet protect it against email spoofing and phishing
People,
Using the website: https://easydmarc.com/tools/dmarc-lookup?domain=name.com
I got this error:
DMARC record is valid, but your domain's None/Quarantine policy does
not yet protect it against ...
- 1,305
7
votes
2
answers
1k
views
How can I create and update the existing SPF record to allow more than 10 entries?
How can I include another SPF record if my existing domain already has 10 lines of SPF records in the TXT record?
I wanted to add these two:
include:mailgun.org
include:sendgrid.net
This is my ...
- 1,305
1
vote
1
answer
949
views
DMARC reports - fail then pass, and "softfail"
Here are two records from reports, with the actual domain name of my client replaced with "example.com". In the first one, SPF is marked "fail" above under "policy_evaluated&...
- 1,478
0
votes
1
answer
5k
views
spf blocked- can't send emails to people who uses gmail
I use 1and1 Ionos for my email server - I can't send emails to people who use google gmail
spf record v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de ~all
I am not sure what I can do - ...
0
votes
1
answer
666
views
SPF denying emails, and different IPs sender
I'm pretty new to email server configuration, so now I'm trying to make my SPF work well but I'm facing a strange problem. My SPF is like this
v=spf1 +mx +a +ip4:xxx.xxx.xxx.xxx +include:_spf.google....
0
votes
0
answers
232
views
Debugging occasional "Temporary failure in name resolution"
I have an internet-connected mailserver. A friend wants to send Email to one of the hosted domains.
occasionally smtpd reports:
Jun 24 00:56:22 myserver postfix/smtpd[xxx]: warning: hostname e2i740....
- 101
0
votes
2
answers
3k
views
gmail is rejecting my e-mails to a recipient with a gmail address with a 550-5.7.26
I have a fairly straight forward email setup using postfix. Within my house running on a raspberry-pi to which my router forwards all ports. I have a postfix instance that can see incoming mail. A ...
- 137
0
votes
1
answer
1k
views
Network Solutions DNS not always returning DKIM and SPF records
If there is a more appropriate place to ask this or it is a duplicate, please tell me.
I have a client who hosts their domains with Network Solutions. Some of their emails were bouncing due to ...
- 281
3
votes
3
answers
6k
views
Can I stop a SPF SOFTFAIL in Gmail when sending to and from addresses that have a mail alias?
I have a vanity domain (mydomain.com) hosted by Gandi and configured with mail aliases for my family that point to our respective Gmail addresses:
Alias
Real address
[email protected]
[email protected]
...
- 133
1
vote
2
answers
219
views
Does this report mean someone is attempting to send emails fraudulently or that I have things configured wrong?
Pretty new to spf/dkim and dmark.
After setting this up just this morning I already got a report on a new website. Our service eamils our users via sendgrid and the rest of the emails are sent from ...
- 907
1
vote
0
answers
567
views
520 ip and spf record not match
We are using Google Workspace and set Email forwarding using recipient address map to forward messages at our domain name (@example.com) to an external domain name (@external.com). Ex. mail sent to ...
- 111
1
vote
1
answer
2k
views
How to configure EXIM to check SPF record for incoming emails and add 'Received SPF' header to the incoming emails?
I'm playing with Exim and created a mail server that can accept and send emails alright. Now, I want to enable SPF checking for every incoming email so that a Received SPF header is added to these ...
1
vote
1
answer
5k
views
Email DNS Setup: How do I make HELO publish an SPF record? SPF_HELO_NONE - SPF: HELO does not publish an SPF Record
My environment: hMailServer 5.6.8 on Windows Server 2022 Standard
Let's say I have two domains (I don't really own these domains, they're just examples), www.myblog.com and www.mailserver.com. They ...
- 133
-1
votes
1
answer
979
views
Setup bind9 dns for setup DKIM and SPF records [closed]
Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
1
vote
1
answer
899
views
How to replace "via amazonses.com" with my apps branding "via example.com" for the email identities in AWS SES?
So in SES - there are two ways to verify identities as I can see:
Email identities
Domain identities
With domain identiies - it is easier to fix the "signed-by" and "mailed-by" ...
- 135
8
votes
3
answers
1k
views
Does SPF provide benefits along with DKIM+DMARC?
I have a domain I send emails from via Mailchimp and Google. I've set up DKIM for both of them and added a DMARC record too (for testing atm). I collect reports for DMARC failures and the overwhelming ...
- 181
3
votes
3
answers
698
views
How to set up DNS settings with a domain in the middle for DKIM and SPF?
I am working on a tool that helps the users send emails. I plan on using an MTA (Mail Transfer Agent) in the back end like AWS-SES or Sendgrid etc. In order for the emails to arrive successfully in ...
- 135
0
votes
1
answer
1k
views
SPF Too Many DNS Lookups issue
In our scenario, We're running into an issue with our SPF records in route53. We are receiving SPF Too Many DNS Lookups because we are using multiple mail services. Is there a way to resolve this? I ...
1
vote
3
answers
92
views
Meaning of "sender"?
Reading documentation about SPF records, I can't quite seem to disambiguate the meaning of "sender". It could mean "the IP where the mail client sent the message" or it could mean &...
- 145
0
votes
0
answers
176
views
postfix to gmail silent delivery failure
With the impending turndown of free hosted Google workspace accounts, I'm trying to install my own mail server using postfix/dovecot/opendkim. Mostly, it's working and for many of the services I've ...
- 131
1
vote
1
answer
540
views
email validation: is there any point doing both SPF *and* reverse DNS tests?
For a receiving MTA, it seems to be unnecessary to check both the SPF record for an incoming SMTP connection, and to do an rDNS/PTR lookup.
Consider:
Server gets SMTP connection from aaa.bbb.ccc.ddd, ...
- 223