9
votes
Accepted
Why is google.com trying to send emails from my domain?
Short Answer: You're seeing internally routed emails in your DMARC reports, for recipient domains hosted on Google GSuite.
From the screenshot you share, it seems like these emails sent from Google ...
- 490
4
votes
Accepted
Yahoo rejecting email after registrar change
The problem could be IP reputation. The message is rather clear. The specific IP address (209.182.201.150, I assume it's your mail server) is being rejected.
Plus, that IP address is present in at ...
- 1,133
4
votes
Setting up DKIM, SPF, and DMARC Records for Domains that You Won't Use for Email
If these domains are related to your company or brand, you want to prevent bad actors to be able to abuse these domains.
For SPF you may publish the following records in DNS:
@ IN TXT "v=spf1 -...
- 490
4
votes
How to get SPF and TXT record for mail?
You will have to ask Company 2 for their SPF record details. It may be as simple as their IP address, or if they have multiple IP addresses they may have an include link e.g. Google's SPF is include:...
- 8,511
3
votes
SPF Record for Google Domains Email Forwarding
My understanding is that SPF is for remote servers to authenticate the sender of messages from your domain. Therefore, the SPF record should indicate your sending systems and does not worry about ...
- 31
3
votes
Sent emails pass SPF and DKIM, but fail DMARC when received by Gmail
The issue is caused by inconsistent between return-path and header From:.
Return-Path: mandrillapp.com
From: @seesawsf.com
SPF and DKIM check the domain using RFC5321.MailFrom (generally Return-...
- 31
3
votes
Why is google.com trying to send emails from my domain?
Did you accept or reject a Google calendar invite? The creator of the event will get an email from Google using your email address as 'from' address.
Might be the case for other services offered by ...
- 983
3
votes
Accepted
Can anyone spoof my Email address with mailgun if I'm using it?
Having SPF records on a domain does not prevent the receiving of spam it simply helps servers make decisions. There is no way to prevent spoofing through DKIM, Domain Key or SPF records.
The reason ...
- 33k
2
votes
Yahoo rejecting email after registrar change
UPDATE:
This problem currently appears to be resolved. Emails appear to be working again. It may have just been Yahoo or even blacklisting as Kate has suggested. It's not the first time we've seen ...
- 3,290
2
votes
How to get SPF and TXT record for mail?
Sender Policy Framework (SPF) records are used to help prevent email spam. These records allow an email service provider to determine whether or not the sending IP address belongs to a trusted third ...
- 81
2
votes
Nested SPF records fail to validate
It was that the TXT names for spf1, 2 and now 3 were not terminated with a dot in this particular domain zone management panel! Once that was added, the additional TXT records were seen. This allowed ...
- 61
2
votes
DMARC failure on forwarded SharePoint Online emails
The way I understand it, DKIM and SPF are passing but DMARC is failing
because the header.d address does not match the header.from address.
Is that about right?
Yes it is. The same goes for SPF, ...
- 490
2
votes
Accepted
How do email spam filters tell if a spam email was maliciously sent with intent to shutdown a real email address?
Spam filters cannot definitively tell that the second email is not from the legitimate user unless an SPF record exists to inform them of the only authorised servers for sending messages.
The ...
- 3,013
2
votes
Can anyone spoof my Email address with mailgun if I'm using it?
You can use DMARC to prevent spoofed emails from your domain.
Having a strict policy will prevent spoofing of emails from your address to most major email providers, including Gmail (email providers ...
- 16.3k
2
votes
Accepted
SPF Record for Google Domains Email Forwarding
If you are using gsuite, your SPF record should be v=spf1 include:_spf.google.com ~all perhaps that will work since it is google generic SPF by the look of it.
https://support.google.com/a/answer/...
- 8,511
2
votes
Accepted
SPF record when outgoing mail server is on the same IP as the web server
If your new SMTP server uses the same IP address as your web server, then your SPF record can be: v=spf1 a include:zoho.eu ~all.
If your new SMTP server uses its own separate IP address and is both ...
- 616
1
vote
Can I replace rua entry with ruf in DMARC record?
The ruf directive is generally unsupported by email providers, so you will likely miss a lot of reports if you don't include an rua directive.
In other words, regardless of whether it's valid syntax ...
- 16.3k
1
vote
Accepted
Is DMARC relaxed alignment for SPF/DKIM bad?
Relaxed Alignment let's you authenticate your FROM domain by using a subdomain in your DKIM signature (d=sub.domain.tld) or Return-Path address ([email protected]).
This is very useful for ...
- 490
1
vote
Webform Email Does Not Pass DMARC
I'm the author of an open source contact form that can be used on websites. Here is what I do to allow my webservers to send email to my domain and pass all spam checks:
Contact form configuration:
...
- 99.2k
1
vote
When moving my web hosting but keeping mail hosting, how do I change the SPF TXT DNS record with an IP address?
Your should probably just have v=spf1 mx ~all as a TXT record on example.com. This will mean that only the IP addresses of mail.example.com are permitted to send mail for e.g. <[email protected]>...
- 189
1
vote
DMARC report: systematic SPF failure for a domain
bounce.domain.co.uk should have an SPF record in order to pass authentication check
and header from domain should be equal or aligned with bounce.domain.co.uk in order to pass DMARC check
- 21
1
vote
Accepted
Too Many Included SPF Lookups
Your SPF record (DNS TXT) looks currently like:
"v=spf1 mx include:_spf.google.com include:spf.protection.outlook.com include:servers.mcsv.net ~all"
It had previously a direct include of ...
- 8,485
1
vote
Accepted
How to determine Sender Score IP to look up if straight query fails?
When you're using Office 365 to send out emails, basically, Microsoft determines which IP address it'll use. The SPF record for protection.outlook.com authorizes 491,520 individual IPv4 addresses.
I ...
- 490
1
vote
TXT vs SPF record for Google servers SPF record, either or both?
Recently for anyone looking into this having both SPF and TXT records cause issues. I saw a recent issue where the txt and spf version on a customer was not the same. both being the same may be ok. ...
1
vote
TXT vs SPF record for Google servers SPF record, either or both?
As per satyenshah's Jul 19, 2017 reply to this post:
The dedicated type=SPF record never really caught on. Sender policies using ``type=TXT records were established too well in the early 2000's ...
- 158
1
vote
SPF and ISP authentication
Such emails are supposed to be sent directly from the user's email client to an SMTP server you control, on port 587 (submission) with user authentication (and STARTTLS). Port 25 is inappropriate for ...
- 981
1
vote
Are SPF and DKIM records needed when the SMTP IP is marked as a subscriber block?
I'd say DKIM is definitely a value adder in this scenario!
Different ESPs have different ways of handling block / black lists. However, email authentication is gaining traction.
Apart from the proof ...
- 490
1
vote
Are SPF and DKIM records needed when the SMTP IP is marked as a subscriber block?
While every domain should have SPF configured in the DNS records to identify the servers that are allowed to send emails for the domain I doubt that adding DKIM will make a huge difference as you are ...
- 10.2k
Only top scored, non community-wiki answers of a minimum length are eligible