I have mail server on geko.sbt.net.au serving sbt.net.au as well as several other TLD domains, a while back using help from this list, some write ups and mxtoolbox as means of verifying/testing I've set SPF/DKIM/DMARC (or so I thought...)
as it seemed to pass all test I was able to run, I assumed it was set up correctly, just now, noticed I get rejected from my own gmail address with SPF/DKIM (1) (it was working OK in the past) checking with mxtoolbox: I get NO SPF for geko.sbt.net.au, I do get SPF for sbt.net.au what tools/website should I use to test/verify SPF/DKIM/DMARC ? do I need SPF record for both mail host as well as domain ? what else am I missing or stuffed up ? thanks for any pointers, hope I'm not too far off topic Voytek (1) Sep 16 13:04:55 geko postfix/smtp[2651]: BC9EB200534: to=<x...@gmail.com>, relay=gmail-smtp-in.l.google.com[172.217.194.26]:25, delay=11, delays=0.01/0.04/2/8.8, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[172.217.194.26] said: 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [sbt.net.au] does not pass with ip: 550-5.7.26 [103.106.168.106].To best protect our users from spam, the message 550-5.7.26 has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. p2-20020a170902e74200b00176a0d8780csi2398305plf.285 - gsmtp (in reply to end of DATA command))
