SPF auth result did not produce a pass. DMARC SPF result is fail. According to learndmarc.com

I have copied all External DNS entries to my external DNS server but some of my domains are complaining about it.

Google Postmaster Tools is also complaining. See image below

What could be an issue?

Could be many things:

  • nameserrvers not configured correctly
  • typos in copying the dns entries
  • space rays

Can you provide the output of learndmarc? Are there errors or warnings on the mailinabox status page?

Here’s the anonymous learndmarc result.

DMARC Results

--- Connection parameters ---
Source IP address: 0.0.0.0
Hostname: example1.com
Sender: user@example2.com

--- SPF ---
Domain: example2.com
Identity: RFC5321.MailFrom
Auth Result: PERMERROR
DMARC Alignment: 

--- DKIM ---
Domain: example2.com
Selector: mail
Algorithm: rsa-sha256 (2048-bit)
Auth Result: PASS
DMARC Alignment: PASS

--- DMARC ---
RFC5322.From domain: example2.com
Policy (p=): quarantine
SPF: FAIL
DKIM: PASS
DMARC Result: PASS

--- Final verdict ---
DMARC does not take any specific action regarding message delivery. Generally, this means that the message will be successfully delivered. However, it's important to note that other factors like spam filters can still reject or quarantine a message.

---------------------
Thanks for using learndmarc.com
This free service is brought to you by URIports.com - DMARC Monitoring Reinvented.

Here status page for this domain.

I noticed something with mail._domainkey entry.

It has two values.

"v=DKIM1; h=sha256; k=rsa; s=email; p=........" "+......"

But when I paste this in my external DNS server, it strips the quotes “” so it becomes:

v=DKIM1; h=sha256; k=rsa; s=email; p=........ +......

Is this okay?

Oh I solved it! Many thanks to Where to put SPF records - #16 by alento

My mail server domain was restricting other domains. I had to change TXT record to v=spf1 mx -all

DMARC Results

--- Connection parameters ---
Source IP address: 0.0.0.0
Hostname: example1.com
Sender: user@example2.com

--- SPF ---
Domain: example2.com
Identity: RFC5321.MailFrom
Auth Result: PASS
DMARC Alignment: PASS

--- DKIM ---
Domain: example2.com
Selector: mail
Algorithm: rsa-sha256 (2048-bit)
Auth Result: PASS
DMARC Alignment: PASS

--- DMARC ---
RFC5322.From domain: example2.com
Policy (p=): quarantine
SPF: PASS
DKIM: PASS
DMARC Result: PASS

--- Final verdict ---
DMARC does not take any specific action regarding message delivery. Generally, this means that the message will be successfully delivered. However, it's important to note that other factors like spam filters can still reject or quarantine a message.

---------------------
Thanks for using learndmarc.com
This free service is brought to you by URIports.com - DMARC Monitoring Reinvented.