SPF, DKIM, DMARC... All Set, And ICloud Mail STILL Says Spam

Solveddkimdmarcemailspf30 replies · 806 views · started
  1. ok weird one we just realized that my new business mailbox has been landing in spam for who knows how long. A customer on iCloud Mail mentioned it casually and my stomach dropped.

    i went into our DNS and there is an SPF record, and i think DKIM was set up when we signed up for the service, honestly idk how to check whether any of it actually works. where do i start without breaking our email completely?

    1
  2. ok but what does the Authentication-Results header say for SPF, DKIM and DMARC? ??

    2 2 helpful
  3. lol same thing happened to me make a backup before u touch the antivirus, learned that the hard way hope that helps :)

    thumbsup

    2 0 helpful
  4. oh ive been there lol have u checked ur spf settnigs? mine were reset after an update

    39 0 helpful
  5. im literally losing my mind here reading this at 2am instead of sleeping, no regrets

    3 2 helpful
  6. yeahhh contact forms that send mail From teh visitor's address are spoofing that person's domain and will fail everywhere. send from your own address (like noreply@yourdomain) and put the visitors address in Reply-To.

    1 0 helpful
  7. DMARC cares about alignment: the domain in the visible From address has to match teh DKIM d= domain or the SPF envelope domain. A service that signs with its own domain will pass DKIM but fail DMARC. Turn on cusotm domain authentication in that service. good luck man!

    6 0 helpful
  8. ok so a domain must have only one SPF record. two v=spf1 TXT records make SPF return a permanent error. Merge them into one, for example v=spf1 include:_spf.provider-a.example include:provider-b.example ~all, and keep total DNS lookups at 10 or fewer.

    thumbsup

    4 0 helpful
  9. yeahhh DKIM is per sending service. every tool that sends as your domain (mailbox provider, newsletter tool, shop platform) needs its own DKIM key published, usually as a TXT or CNAME record at selector._domainkey.yourdomain. when you switch tools, the new one needs its own record. worked for me anyway 🤷

    13 0 helpful
  10. for me it was the cable. swapped it and boom, fixed

    9 2 helpful
  11. everyone keeps saying this but nobdoy posts proof. for me it was the update. swapped it and boom, fixed

    lol

    0 1 helpful
  12. first, look at what teh receiver actually saw. in Gmail use "Show original", in Outlook view message source. look for spf=pass, dkim=pass and dmarc=pass in the Authentication-Results header. Anything that says fail or none tells you exactly which piece to fix.

    2 0 helpful
  13. have u checked your icloud settings? mine were reset after an update, wait does this also apply to mailbox?

    6 6 helpful

Reply to this topic

Sign in or create an account to reply.