Questions tagged [spf]

Sender Policy Framework is a standard by which the owner of a domain uses a specially formed DNS record to advertise which hosts are authorized to send email for the domain.

Sender Policy Framework (SPF) is a technique to prevent e-mail sender address forgery. With SPF system administrators add information about allowed senders for particular domain in a DNS server's TXT and/or SPF record.

Please have a look at the canonical question What are SPF records and how do I configure them.

869 questions
0
votes
2 answers

send email from another server than FROM domain without being marked as spam

I want to send a mail from a website. The mail server from this domain is not publicly reachable, so I can't use that to send the mail. The webserver that hosts the website has another email server that I can/have to use. But I want the FROM to be…
Matthias
  • 101
  • 2
0
votes
1 answer

Compared to SPF MAIL FROM checks, what are HELO checks good for?

I’m starting with SPF on my (email) domain. (No DKIM or DMARC yet.) I see little usefulness in HELO identity checking in SPF and am thinking about setting the HELO identity to my domain (instead of the hostname) or the IP of the machine. Apart from…
Robert Siemer
  • 542
  • 9
  • 19
0
votes
1 answer

Setup DNS records for SMTP send-only server

I have website on hosting with domain exmpl.com. I have DNS record for exmpl.com: exmpl.com MX(10) mail.exmpl.com mail.exmpl.com A XX.XX.XX.XX exmpl.com TXT v=spf1 +a +mx +a:hosting.server ~all All incoming mail recived by hosting server. Now all…
0
votes
0 answers

How to combine multiple SPF domains, one with an mx mechanism?

I combined 3 SPF records using the standard protocol, but got a null error after combining them. Individual records: v=spf1 include:spf.sendinblue.com mx ~all v=spf1 include:dc-aa8e722993._spfm.example.org ~all v=spf1 include:_spf.google.com…
0
votes
1 answer

How do I add individual mail-sending websites to my SPF record?

My company, which sends @example.co email from Google Workspace, HubSpot, and Salesforce, has the following SPF record in DNS: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:xxxxxxxx.xxxxx.hubspotemail.net ~all We also have…
ST7686
  • 1
0
votes
1 answer

Why am I failing SPF only in my Google DMARC report?

Curious as to why my Google DMARC is coming back with a fail under SPF. Here is the report: google.com
2kreate
  • 1
  • 1
0
votes
1 answer

SPF record with DMARC policy is not picking up the policy

We are now going through security verification, and we are using SecurityScorecard for it. One of the issues that we are still trying to fight, is the SPF record. The details of the error are as follows: SPF softfail record without DMARC policy…
0
votes
1 answer

SPF/DKIM setup for a registrar's email forward

I have a number of domains with a registrar with straight forward forwards to another email address. The system has worked flawlessly for a lot of years over a lot of domains but recently I created a new forward which failed on testing. The error…
0
votes
1 answer

Google SPF fails with some IPs

GMail MX are ASPMX.L.GOOGLE.COM: 1 ALT1.ASPMX.L.GOOGLE.COM: 5 ALT2.ASPMX.L.GOOGLE.COM: 5 ASPMX3.GOOGLEMAIL.COM: 10 ASPMX2.GOOGLEMAIL.COM: 10 When checking for IPs for these names, each time your ask for a resolution you can hit differents IPs.…
MickaelFM
  • 113
  • 4
0
votes
1 answer

Emails are going to spam

Hey guys, I am currently running exchange 2010, I have implemented SPF record, and tried to implement dkim/domain keys using domain sink, but it doesn't seem to work. The problem I am having is that all my emails go to spam, whenever I email some…
Sam
0
votes
1 answer

550-5.7.26 Unauthenticated email from domain is not accepted due on ERP only

I have made updates to our mail server to use DMARC. So after This our ERP system cannot send emails to gmail.com or yahoo.com but Outlook sends emails with no problems. Below is the header for an email that was sent from my domain to Gmail and…
Ahmed Reda
  • 21
  • 2
  • 5
0
votes
1 answer

DMARC appears to fail, multiple DKIM signatures with one matching the from address

I am using a free outlook account. In the outlook account management portal I have added an alias for my custom domain (alias@mydomain.website). With this I am able to send mails from this alias, which appear in the receivers mailbox as "outlook…
0
votes
0 answers

DMARC, DKIM, or SPF? Emails going into quarantine

I have never had to deal with DKIM, DMARC, or SPF records before; however, our SPF record is full (10, Cloudflare) and I have a vendor whose emails aren’t making it to our mailboxes. I made exceptions in our spam filter for the emails, and have…
Cody
  • 1
0
votes
1 answer

How to stop spammer spoofing my domain for emails

I've scanned all my code and even changed the passwords to my google apps account such that the SMTP password has changed. However, spammers are still sending emails from June24-eBay-USA-contactmsg-6153642111@redacted.com and the email is phishing…
ParoX
  • 302
  • 1
  • 7
  • 21
0
votes
1 answer

DMARC report with passing O365 DKIM signature being sent by Google server

The dmarc report values are as follows: dkim_domain : mydomain.onmicrosoft.com dkim_result : pass selector : selector1-mydomain-onmicrosoft-com header_from : mydomain spf_domain : mydomain spf_result : fail source_ip : 209.85.219.70 (this is a…
Adam Winter
  • 129
  • 1
  • 6