Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

Cloudron Forum

Apps | Demo | Docs | Install

Cloudron SPF record does not permit IP

Scheduled Pinned Locked Moved Solved Support
emailspf
36 Posts 8 Posters 647 Views
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C Offline
    C Offline
    ccfu
    replied to RoundHouse1924 on last edited by ccfu
    #27

    @RoundHouse1924

    That definitely isn't normal or correct behaviour. However: my.sharona.cloud is your sending mailserver, correct? The SPF fail shown is not a result of a check the receiving server is making then.

    I noticed something similar in a mail I just sent as a test from Outlook to a Gmail address. An SPF fail was also present in the headers (checked by Haraka using the IP of the Outlook client) but there is also (as expected) an SPF pass for the server IP, as that is what was checked by the receiving SMTP server. In other words I don't see a risk that mail delivery will fail due to SPF checks, but it would still be important to identify why Haraka is doing this.

    1 Reply Last reply
    2
  • P Offline
    P Offline
    panthrosrevenge
    wrote on last edited by
    #28

    I would also like to add that I have been seeing this behavior as well. I am getting SPF failures for IP mismatch as the header is showing the IP of whatever client is sending email, not the SMTP server.

    C 1 Reply Last reply
    2
  • C Offline
    C Offline
    ccfu
    replied to panthrosrevenge on last edited by
    #29

    @panthrosrevenge

    SPF fails reported by your own server though, right?

    P 1 Reply Last reply
    0
  • P Offline
    P Offline
    panthrosrevenge
    replied to ccfu on last edited by
    #30

    @ccfu I'm seeing the sending clients IP address in the headers instead of the cloudron SMTP server. This causes an SPF failure as the client IP isn't an authorized sender for the domain.

    C 1 Reply Last reply
    1
  • C Offline
    C Offline
    ccfu
    replied to panthrosrevenge on last edited by
    #31

    @panthrosrevenge

    Yes, I get that, but which server is failing it? Your mailserver or the recipient's? Look again at the header and you will most likely see two SPF checks - one by your mailserver, which fails (that is the problem described in this thread) and one by the receiving mailserver which should be checking your server IP and should therefore pass.

    P 1 Reply Last reply
    1
  • P Offline
    P Offline
    panthrosrevenge
    replied to ccfu on last edited by
    #32

    @ccfu It's the recipient's server that's showing the sending client's IP in the header. Mail is going through ok besides getting a soft fail on SPF and raising spam score

    C 1 Reply Last reply
    0
  • C Offline
    C Offline
    ccfu
    replied to panthrosrevenge on last edited by ccfu
    #33

    @panthrosrevenge

    Yes, but the incoming mail would show the header anyway if it is being sent by your server. Sorry to ask again, but are you sure the sending client IP is really being checked by the recipient SMTP server? That would mean that either your mailserver is not even sending the server IP when it connects, which I find hard to believe and would be concerning, or the recipient's mailserver is misconfigured.

    On the line in the header showing the softfail, which of the following appears?:

    1. received-SPF: SoftFail (**YOUR MAILSERVER**: domain of **yourdomain.tld** does not designate **IP** as permitted sender) receiver=**YOUR MAILSERVER**

    or

    1. received-SPF: SoftFail (**RECIPIENT MAILSERVER**: domain of **yourdomain.tld** does not designate **IP** as permitted sender) receiver =**RECIPIENT MAILSERVER**
    1 Reply Last reply
    1
  • P Offline
    P Offline
    panthrosrevenge
    wrote on last edited by
    #34

    Here's my header showing the SPF failure. I'm using mxtoolbox.com for testing. I'm also using Sendgrid as an SMTP relay with an API key. Sending domain is different than the MX domain as I have a couple different domains I send email from.

    Received: (Haraka outbound); Sun, 07 May 2023 15:40:12 +0000
    Authentication-Results: mymxdomain.com;
    auth=pass (plain);
    spf=softfail smtp.mailfrom=sendingdomain.com
    Received-SPF: SoftFail (mymxdomain.com: domain of sendingdomain.com does not designate sending client public IP as permitted sender) receiver=mymxdomain.com; identity=mailfrom; client-ip=sending client public IP helo=[LAN IP]; envelope-from=<mailbox@sendingdomain>
    Received: from [LAN IP] ([sending client public IP])
    by mymxdomain.com (Haraka/3.0.1) with ESMTPSA id 6F7C9FA2-9E4D-4C74-932F-D177277F2FCC.1
    envelope-from <mailbox@sendingdomain.com>
    tls TLS_AES_256_GCM_SHA384 (authenticated bits=0);
    Sun, 07 May 2023 15:40:12 +0000

    C 1 Reply Last reply
    1
  • C Offline
    C Offline
    ccfu
    replied to panthrosrevenge on last edited by
    #35

    @panthrosrevenge

    As I suspected, that is Haraka on your own server softfailing the client IP. The recipient SMTP server should only be checking the Sendgrid IP and passing it as long as it is included in the SPF record for the domain in question.

    1 Reply Last reply
    2
  • girishG girish referenced this topic on
  • jdaviescoatesJ jdaviescoates referenced this topic on
  • girishG girish forked this topic on
  • girishG girish has marked this topic as solved on
  • girishG Do not disturb
    girishG Do not disturb
    girish Staff
    wrote on last edited by
    #36

    This is fixed in 7.5.0

    1 Reply Last reply
    1
  • lukasgabrielL lukasgabriel referenced this topic on

  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks