Edit of SPF needed to avoid bouncing emails

[#1]

Hello, I am not certain this is correct place to ask for help: if not can someone point me in the correct direction.

I use an email address of info@mcgregoropticians.co.uk to send emails from my practice management system "Optix" these are rejected if trying to sent hen to gmail addresses.

The fix that I have been given by Optix is that the SPF record has to be edited to include the IP address of their server.

I am an optician not IT expert so need help to either do this, or request someone in PlusNet?Greenby to make the change.

Please Help!

I have attached the new line that needs to be entered and a screen shot. Hopefully this will be a simple fix for the right person to do.

v=spf1 a mx ip4:77.73.168.0/23 include:_spf-internal.plus.net include:_spf-internal2.plus.net include:spf.greenby.com ~all

[#2]

 "Hopefully this will be a simple fix for the right person to do."

Fingers (and toes) crossed! 😆

[#3]

Hopefully this will be a simple fix for the right person to do.

@AMcG I'm afraid not!. On the PLusnet DNS system, Its not possible to change the SPF record from the default. 

Unless you can configure the Optix system to send via the Plusnet servers then I suggest you consider moving your domain to a hosting service which provides a more flexible DNS control. 

[#4]

Which SMTP server are you using when sending as info@mcgregoropticians.co.uk
that results in a rejection with either : spf=fail or spf=softfail

It looks to be configured to use a Plusnet  SMTP server from a quick squint :

https://www.nslookup.io/domains/mcgregoropticians.co.uk/dns-records/#google

[#5]

---

@AMcG wrote:

I use an email address of info@mcgregoropticians.co.uk to send emails from my practice management system "Optix" these are rejected if trying to sent hen to gmail addresses.

The fix that I have been given by Optix is that the SPF record has to be edited to include the IP address of their server.

Um... This rather reminds me of a random thought that occurred to me a while ago about a possible cause of general issues for Plusnet email account users trying to send to Gmail recipients - due to the format of Plusnet email accounts usernames.

Interestingly, or otherwise, the results for 'my' email domain, a user with a static IP - i.e. derived from my Plusnet account email address <User>.plus.com:

SPF record
This record is valid for 10m.
Include the SPF record at _spf-internal.plus.net and pass if it matches the sender's IP.
  include:_spf-internal.plus.net
Or else, include the SPF record at _spf-internal2.plus.net and pass if it matches the sender's IP.
  include:_spf-internal2.plus.net
Or else, include the SPF record at spf.greenby.com and pass if it matches the sender's IP.
  include:spf.greenby.com
Or else, mark the email as softfail.
  ~all  

[#6]

The sender ip i believe is the outgoing mail server rather than your clients ip address.

The spf record associated with your subdomain is saying unless the sending mail server ip matches one of those listed via the includes then recipient mail server should softfail. I.e. put it in the recipients spam folder rather than rejecting it completely.

[#7]

Sending to gmail is getting worse....

Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the
    sender is unauthenticated. 550-5.7.26 Gmail requires all senders to
    authenticate with either SPF or DKIM. 550-5.7.26  550-5.7.26
    Authentication results: 550-5.7.26  DKIM = did not pass 550-5.7.26  SPF
    [offscotland.plus.com] with ip: [213.5.180.238] = did not pass 550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to 550 5.7.26

[#8]

@AMcG 

Considering that you can host your personal domain as an Email only service, with full control, with a hosting company such as Mythic Beasts for £20 per annum, one must ask why it is being hosted by Plusnet/Greenby.

[#9]

---

@njay wrote:
The sender ip i believe is the outgoing mail server rather than your clients ip address.

The spf record associated with your subdomain is saying unless the sending mail server ip matches one of those listed via the includes then recipient mail server should softfail. I.e. put it in the recipients spam folder rather than rejecting it completely.

---

OK, the Optix mail host is not included in a Plusnet range of IP addresses. Not too surprising as it is in the Optix domain!

https://www.whois.com/whois/77.73.168.0

So my question would be how come an (apparently) Optix email account email, going via an Optix mailer, is failing due to a Plusnet domain DNS setting? If being sent with Plusnet account credentials, why is it not going directly to a Plusnet mailer?

If the Optix mailer was hosted on a Plusnet account why would it not already have a Plusnet IP based address?

I'm missing something here...

[#10]

---

@offscotland wrote:

Sending to gmail is getting worse....

Diagnostic-Code: smtp; 550-5.7.26 Your email has been blocked because the
    sender is unauthenticated. 550-5.7.26 Gmail requires all senders to
    authenticate with either SPF or DKIM. 550-5.7.26  550-5.7.26
    Authentication results: 550-5.7.26  DKIM = did not pass 550-5.7.26  SPF
    [offscotland.plus.com] with ip: [213.5.180.238] = did not pass 550-5.7.26
    550-5.7.26  For instructions on setting up authentication, go to 550 5.7.26

---

213.5.180.238 Is an Enix domain IP. 

https://www.whois.com/whois/213.5.180.238

How are you sending your emails? If using client email software on a PC then the current Greenby recommended settings for sending Plusnet emails are:

Outgoing Server Address relay.plus.net [212.159.8.107]
SMTP Port 465 (Encryption Enabled)

[#11]

My previous reply was in relation to userid.plus.com subdomains or domains that plusnet host on a users behalf that map onto the userid.plus.com

In the example above i believe their domain is hosted by plusnet so emails sent via webmail or email client configured to log in to plusnet outgoing email server would be going out by plusnet mail server.

However, i believe they are also using their domain email address as sender email address on optix mail server which isnt included in spf record.