Your DMARC authentication is not setup using best practices.

  • Resolved anteryasa

    (@anteryasa)


    3 years, 7 months ago

    Hi!

    So, I am having an issue with DMARC with Mailpoet 3, I have the under 1000 subs free premium plugin.

    According to MailGenius, I have DMARC issues, but can’t figure out what?

    My current DMARC value in CloudFlare DNS is:
    v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1

    The error I am getting says:

    (-2 points) Your “from” address does not match your SPF “from” address.
    Solution:
    Make sure your SPF authentication is setup correctly so your SPF from domain matches the from domain in your emails.

    Your From domain is: anteryasa.fi
    Your SPF MailFrom domain is: m4.sendingservice.net

    Existing SPF header attributes:
    Status: pass
    Message: m4.sendingservice.net: Sender is authorized to use ‘[email protected]’ in ‘mfrom’ identity (mechanism ‘include:spf.sendingservice.net’ matched)
    Receiver: p-pm-inbound02c-aws-euwest1c
    Identity: mailfrom
    Envelope-from: [email protected]
    Helo: mta151.sendingservice.net
    Client-ip: 176.9.183.151

    NOTE: To pass Authenticated Received Chain (ARC) email authentication, Email Service Providers will check for the alignment of both DKIM and SPF to the From header, but only 1 of the above needs to be aligned for the check to pass. It is still best practice to have both aligned for redundancy, so if anything errors when checking either DKIM or SPF the other can still succeed and your email will not be marked as unauthenticated.

    Can someone help? What do I need to change? I have authenticated everything, and my domain is anteryasa.fi, you can check my DNS.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hi there @anteryasa,

    Thanks for reching out ??

    As I mentioned in my email reply, it’s expected that the SPF MailFrom domain is m4.sendingservice.net when using MailPoet Sending Service.
    You can check your spam score with our own tool as well: https://kb.mailpoet.com/article/147-test-your-spam-score-with-mail-tester

    I confirmed that you have all MailPoet-related DNS records in place.

    I also see that you added an SPF record: v=spf1 a mx include:spf.sendingservice.net ~all

    Note that if you’re using MailPoet Sending Service, there is no need to set up an SPF record for your domain so I’d recommend removing it.

    Cheers!

    Hi there @anteryasa,

    We haven’t heard back from you in a while, so I’m going to mark this as resolved – if you have any further questions, you can start a new thread.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Your DMARC authentication is not setup using best practices.’ is closed to new replies.

Tags