Sign in

why is every message from password reset emails landing in spam on outlook.com?

dkimdmarcemailspf15 replies · 343 views · started
Reply
  1. Dario Ekström
    @dekstrom

    Ive followed three different guides and Im more confused than before. Messages from password reset emails keep getting flagged by Outlook.com.

    our DNS panel has a TXT record for SPF, another one someone added later, plus a DMARC record copied from a blog post. i suspect we made it worse. can someone explain which records we actually need and how to tell if they pass? 😂 please be gentle, email authentication is clearly not my strong side.

    2
  2. Camila A.
    @camila_voxel

    ok so start DMARC with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain to collect reports without affecting delivery. Read the reports for a couple of weeks to see every source sending as your domain, fix them, then move to quarantine. gmail users can also sign up for Postmaster Tools to see domain reputation. good luck man!

    2 0 helpful
  3. Paula
    @paula_cobalt

    lol same thing happened to me a domain must have only one SPF record. Two v=spf1 TXT records make SPF return a permanent error. Merge them into one, for example v=spf1 include:_spf.provider-a.example include:provider-b.example ~all, and keep total DNS lookups at 10 or fewer. good luck man!

    0 2 helpful
  7. Kira Brandt
    @bytewrangler

    DKIM is per sending service.. lmao every tool that sends as ur domain (mailbox provider, newsletter tool, shop platform) needs its own DKIM key published, usually as a TXT or CNAME record at selector._domainkey.yourdomain. When you switch tools, teh new one needs its own record.

    0 1 helpful
  8. Noor
    @noor_packet

    ok so have u checked your spf settings? mine were reset after an update worked for me anyway 🤷

    11 4 helpful
  10. Haruto K.
    @pixel_owl

    hmmmm quick q wait does this also apply to dmarc?

    1 0 helpful
  11. Yusuf Torres
    @yusuf.torres

    hmmm contact forms that send mail From the visitors address are spoofing that persons domain and will fail everywhere. send from your own address (like noreply@yourdomain) and put the visitors address in Reply-To. hope that helps :)

    14 0 helpful
  12. Hana Jansen
    @hjansen_45

    yeahhh first, look at what the receiver actually saw... in Gmail use "Show original", in Outlook view message source, look for spf=pass, dkim=pass and dmarc=pass in the Authentication-Results header. Anything that says fail or none tells u exactly which piece to fix. good luck man!

    0 2 helpful
  13. Farah
    @lucky_pilot291

    wait does this also apply to reset?

    0 5 helpful
  14. Noor
    @noor_packet

    try turning off the firmware first, fixed it for me. dumb question but how do i even check teh firmware

    9 0 helpful
  15. Cleo Larsen
    @quiet_owl

    authentication is necessary but not sufficient. if the content looks like spam or people never open teh messages, Microsoft 365 inboxes will still junk them. clean lists matter as much as DNS. idk maybe im wrong lol

    18 1 helpful
  16. Dario Ekström
    @dekstrom
    in reply to @hjansen_45

    @hjansen_45 wowww ok merged the two SPF records into one and added DKIM for the newsletter tool. Headers now show three passes and password reset emails lands in the inbox 😂 Thank you!

    10 0 helpful

Reply to this topic

Sign in or create an account to reply.