Fix spf=softfail does not designate as permitted sender

Hey there,

all of my emails seem to go into the spam of the receivers. I have searched a little bit and found out that the received message says:

ARC-Authentication-Results: i=1; mx.google.com;
       spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.105.57.252 as permitted sender) [email protected];
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=domain.de
Return-Path: <[email protected]>
Received: from 26.mo544.mail-out.ovh.net (26.mo544.mail-out.ovh.net. [46.105.57.252])
        by mx.google.com with ESMTPS id bo16-20020a056000069000b002206bff6e9esi845351wrb.39.2022.08.26.03.00.54
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Fri, 26 Aug 2022 03:00:54 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 46.105.57.252 as permitted sender) client-ip=46.105.57.252;
Authentication-Results: mx.google.com;
       spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.105.57.252 as permitted sender) [email protected];
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=domain.de
Received: from player756.ha.ovh.net (unknown [10.108.4.194]) by mo544.mail-out.ovh.net (Postfix) with ESMTP id 08BB221C84 for <[email protected]>; Fri, 26 Aug 2022 10:00:54 +0000 (UTC)
Received: from domain.de (ip-088-152-059-117.um26.pools.vodafone-ip.de [64.172.57.127]) (Authenticated sender: [email protected]) by player756.ha.ovh.net (Postfix) with ESMTPSA id 

I assume the IP address that says “does not designate as permitted sender” is the proxied IP address. Accordingly, I have no possibility to write this into the SPF record or do I see this wrong?

This seems to raise the X-VR-SPAMSCORE in any case.

And an equally critical question is why my real IP address without proxy (modified here) is simply in the mail:

Received: from sascha-brockel.de (ip-088-152-059-117.um26.pools.vodafone-ip.de [64.172.57.127]) (Authenticated sender: [email protected]) by player756.ha.ovh.net (Postfix) with ESMTPSA id A25622D123909; Fri, 26 Aug 2022 10:00:51 +0000 (UTC)

Is there no way to prevent this?

My spf record: v=spf1 include:_spf.mx.cloudflare.net include:_spf.google.com ~all

Your SPF record includes Cloudflare and Google mail servers, but you are sending from a server at ovh.net. You need to add this to your SPF record. (And if you’re not actually sending mail from your domain via Google, remove that.)

Add this: include:mx.ovh.com

Cloudflare proxies are not involved with sending email. Email headers include your client IP address. The only way around this would be to run your own mail server and configure it not to include that information, which would be far beyond the scope of this forum.

2 Likes

Yeah, you are right. I just found this thread: Email Routing and SPF

Here they say the same but I didn’t know that. Thank you!

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.