On 28.11.23 20:38, Matthew McGehrin via Postfix-users wrote:
I was able to replicate this error, however it's not a
misconfiguration in Postfix, but rather a policy change by Google. I
didn't notice the bounce message sooner, since it was routed to my
SPAM folder on Gmail.
The change is not that recent, our customers have been requesting fixing SPF
records and/or setting up DKIM for some time.
If I use a GMAIL From: address and attempt to email another GMAIL
account, it bounces back with this error.
I don't think you can make your mail servers pass SPF/DKIM checks if you
have gmail.com From: address.
You need to authenticate to gmail servers for this and google servers afaik
also verify if you logged as proper user.
For external domains, you can make SPF/DKIM pass so google should be able to
verify
Only, when I use a third-party to relay the message. I think what is
happening is that Google has implemented a new anti-spam policy
Anti-forging policy, as SPF and DKIM are designed to authenticate you, they
can't guarantee you won't spam.
rejecting any emails
that have GMAIL email hosted domain that is failing SPF/DKIM. Only
messages relayed via Google are valid. If you are using a contact
form, the From: address is typically munged to be the user filling out
the form.
OP is complaining about gmail rejecting message with valid SPF and DKIM:
https://marc.info/?l=postfix-users&m=170110387025370&w=2
and the solution should be removing useless "s=email" from DNS record as
Victor stated here:
https://marc.info/?l=postfix-users&m=170110674327922&w=2
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Support bacteria - they're the only culture some people have.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
