topic Re: Replies to Gmail accounts being rejected in Email

Replies to Gmail accounts being rejected

OldCoggers — Fri, 24 Mar 2023 17:05:58 GMT

I've just noticed that when I reply to an email from a Gmail account, my reply is rejected with the following message:

Reporting-MTA: dns; avasout-peh-002 [212.159.14.18]
Received-From-MTA: dns; [192.168.1.156] [90.255.142.189]
Arrival-Date: Fri, 24 Mar 2023 14:24:57 +0000


Final-recipient: rfc822; name@gmail.com
Diagnostic-Code: smtp; 550-5.7.26 This mail is unauthenticated, which poses a security risk to the

The problem only occurs when sending to a Gmail account and seems to be an authentication failure from my mail server. Something to do with a missing DKIM or SPF record. Is this something Plusnet would set up on their mail server?

Any help would be appreciated.

Thanks

OldCoggers

Re: Replies to Gmail accounts being rejected

Townman — Sat, 25 Mar 2023 01:07:01 GMT

Two questions...

Are you sending from @account.plus.com or @your-domain.tld
Is your SMTP configuration using authentication

Re: Replies to Gmail accounts being rejected

OldCoggers — Sat, 25 Mar 2023 10:46:30 GMT

Hi Townman, thanks for the quick response. In answer to your question:

1. I'm using my own domain, i.e. myname.net

2. The SMTP security settings are: Connection Security - None; Authentication Method - Password, transmitted insecurely

I've used these setting for about twenty years!

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

MisterW — Sat, 25 Mar 2023 12:31:07 GMT

@OldCoggers

I've used these setting for about twenty years!

and 20 yrs ago they were fine, but I'm afraid with the increase in levels of spam detection (particularly by google) , they are now not sufficient

You need to add an SPF record for your domain. Assuming you are sending via the Plusnet smtp relays then it should be

v=spf1 a mx include:_spf-internal.plus.net include:_spf-internal2.plus.net ~all

Also you should change your SMTP connection security to STARTTLS and use port 587

Re: Replies to Gmail accounts being rejected

OldCoggers — Sat, 25 Mar 2023 12:52:45 GMT

Hi MisterW,

I've changed the Connection security to STARTTLS and am already using port 587.

However, I'm unclear where to add the SPF record. Plusnet host my domain, although I see by Googling that this is only because I've been with them for donkey's years and that they don't do it now. I use Thunderbird as my mail client, but can't see any reference to SPF in the settings

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

OldCoggers — Sat, 25 Mar 2023 13:00:27 GMT

Interestingly, I've just tested sending an email from my gmail acct to my domain.net acct and I was able to reply without it being bounced. This is with the recommended security settings, but no SPF record.

Thanks!

I would still be interested in setting up an SPF record

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

MisterW — Sat, 25 Mar 2023 13:04:46 GMT

Plusnet host my domain,

@OldCoggers Ah! , then whilst there is no formal way of creating a SPF TXT record , there is a 'work around'

Create an MX record using the values below on your domain as follows using the domain configure option in the member centre. Login to the member centre and go to https://www.plus.net/my.html?action=domainv2 , click the 'configure' button and then add an MX record in the Additional DNS records section by clicking the 'Configure DNS records' button

Type: MX
Priority: 999999
Right Field: please-add-spf-records

That should create an SPF record ( may take up to about 6 hrs ). You can check if its created using the mxtoolbox site https://mxtoolbox.com/ , entering your domain and selecting SPF from the dropdown

Re: Replies to Gmail accounts being rejected

OldCoggers — Sat, 25 Mar 2023 13:14:35 GMT

Thanks MisterW! I've managed to do that so I'll check later to see whether it's been set up correctly.

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

OldCoggers — Sun, 26 Mar 2023 12:31:34 GMT

Hi MisterW,

I left the dns record to propagate overnight, but mxtoolbox.com doesn't have anything showing this morning. Still, never mind, changing the security settings seems to have fixed the problem with replies to emails bouncing so thanks for that.

Cheers

Phill

Re: Replies to Gmail accounts being rejected

MisterW — Sun, 26 Mar 2023 12:39:41 GMT

There was an instance a little while ago where this didn't seem to work first time. Removing and reading the MX record worked. Does the mx record show in mxtollbox ?

Re: Replies to Gmail accounts being rejected

Gandalf — Sun, 26 Mar 2023 12:57:31 GMT

If the domain in question is the one you’ve signed up to the Community with, then happy to confirm that does now have a SPF Record, according to the MX Toolbox.

Re: Replies to Gmail accounts being rejected

OldCoggers — Sun, 26 Mar 2023 13:15:56 GMT

Hi Gandalf, thanks, but I am a little confused. If I run mxtoolbox.com on my domain *****n.net, the first page shows a green tick against the DNS Record Found, but when click on the green tick, it goes to a page saying DNS Record Not Found.

Unless, on the line below DNS Record Found, there is a line showing Reported by ns2.force9.net. Is this the DNS record? If I click Transcript, I see two entries, neither of which seem to mention anything about SPF.

As you can probably tell, my knowledge here is a little flaky!

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

MisterW — Sun, 26 Mar 2023 13:21:56 GMT

Having run the initial MX lookup on your domain using mxtoolbox, there should now be a drop down arrow next to the MX LOOKUP button. Use that to select spf lookup and then click

Re: Replies to Gmail accounts being rejected

OldCoggers — Mon, 27 Mar 2023 09:39:22 GMT

Aah, got it, thanks. It seems I do have an SPF after all!

Cheers

OldCoggers

Re: Replies to Gmail accounts being rejected

mwardm1 — Fri, 05 May 2023 13:16:09 GMT

Thanks for this thread, folks - covers my scenario exactly.

(I'm currently at the 6 hour wait step 😀)

I wonder, though: Couldn't or should Plusnet just trigger the creation of this record automatically on all the domains they host (without an SPF record already or some other suitable criteria)?

Cheers,

Mike.

Re: Replies to Gmail accounts being rejected

pjmarsh — Fri, 05 May 2023 13:25:32 GMT

That would break sending email for anyone who doesn't send email through the Plusnet servers. Not having a SPF record shouldn't be an issue according to the standard. It's Gmails insistence on having it that is non-standard and unusual.

Re: Replies to Gmail accounts being rejected

Alastair2 — Thu, 18 May 2023 16:21:18 GMT

Hi,

I have started having the same issue. Just rang up the helpdesk and they were told by someone in networks that you cannot have an SPF record added.

Does anyone know if this is a new policy? Might as well move providers if that is the case

Re: Replies to Gmail accounts being rejected

MisterW — Thu, 18 May 2023 16:51:37 GMT

Just rang up the helpdesk and they were told by someone in networks that you cannot have an SPF record added.

there never was a formal way of adding an spf record. If you have a p,usnetbhosted domain, then AFAIK the workaround detailed earlier In this thread still works to add the fixed spf record.

Re: Replies to Gmail accounts being rejected

Alastair2 — Thu, 18 May 2023 17:15:48 GMT

Nice one give it 6 hours then. Fingers crossed

Re: Replies to Gmail accounts being rejected

Alastair2 — Mon, 12 Jun 2023 15:36:30 GMT

Well this says no, but fingers crossed still. Otherwise maybe leave PN after 23 years

Dear Mr Brown, As per our conversation on the phone I am very sorry that our domain system doesn't allow for SPF records, again if this is something your domain requires you will need to transfer it to an alternative host. Kind regards, [CSA Removed] [Email notification sent to: [Removed]]

Moderators Note: Personal information and CSA name removed