You're not doing anything wrong, it's because of the way routing works for migrated mailboxes:
https://blogs.msdn.microsoft.com/tzink/2016/05/19/why-does-my-email-from-facebook-that-i-forward-from-my-outlook-com-account-get-rejected/ The SPF fail is when mail goes from Hotmail to Office 365; the check is performed but not used. -- Terry -----Original Message----- From: dmarc-discuss [mailto:[email protected]] On Behalf Of Carlos P via dmarc-discuss Sent: Tuesday, May 24, 2016 9:36 AM To: [email protected] Subject: [dmarc-discuss] Troubleshooting MS ruf Hi, I am having trouble trying to diagnose why some mails are being reported. Attached is an edited report of an average one. *) The SPF record is: v=spf1 ip4:APPROVED_IP_ADDRESS ~all *) No DKIM yet *) The DMARC record is: v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected] As far as I can tell, the trouble is here: received-spf: SoftFail (protection.outlook.com: domain of transitioning DOMAIN.COM discourages use of 25.152.68.57 as permitted sender) Is anything I can do? Thank you Carlos Pantelides @dev4sec seguridad-agile.blogspot.com _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
