For the last couple of weeks, I've been seeing "Delivery Status
Notification (Failure)" from Yahoo's various domains for users who have
dot-forward aliases on my server and are spoofing the "from" field of their
outgoing emails to match their alias.

550 5.7.9 This mail has been blocked because the sender is unauthenticated.
Yahoo requires all senders to authenticate with either SPF or DKIM.
Authentication results: DKIM = FAILURE - SPF xxxx.xxx with ip
209.85.214.178 = FAILURE. See
https://senders.yahooinc.com/smtp-error-codes/#authentication-failures for
more information.

(The masked domain is the one with the alias. The user sent the message
from 209.85.214.178,  Gmail.)

Identical emails from the same user to Gmail and Comcast reach their
recipients just fine. Both indicate that SPF passed, unlike Yahoo.

It looks to me as if Yahoo is expecting the "from" field to pass SPF
instead of (or in addition to) the envelope sender. Or is there a different
issue that I'm not seeing?


-- 
===============================================
Russell Clemings
<rclemi...@gmail.com>
===============================================
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to