Forum Discussion
SPF fail using basic SMTP AUTH
Hello.
We just moved to Office 365 and almost everything is running just fine. But, when we are sending out mails from our ERP system, the mails somehow doesn't pass SPF and DKIM check, but also does pass 🤔
We are using SMTP with basic authentication.
Here is an example from a Gmail account that are blocking the message:
mx.google.com rejected your message to the following email addresses:
email address removed for privacy reasons
Your message wasn't delivered because the recipient's email provider rejected it.
mx.google.com gave this error:
Your email has been blocked because the sender is unauthenticated. Gmail requires all senders to authenticate with either SPF or DKIM. Authentication results: DKIM = did not pass SPF [xxxxxxx.com] with ip: [2a01:111:f400:fe1e::728] = did not pass For instructions on setting up authentication, go to https://support.google.com/mail/answer/81126#authentication 6a1803df08f44-6ae4b416ab0si85203426d6.346 - gsmtp
Diagnostic information for administrators:
Generating server: DU0PR09MB5907.eurprd09.prod.outlook.com
email address removed for privacy reasons
mx.google.com
Remote server returned '550-5.7.26 Your email has been blocked because the sender is unauthenticated. 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM. 550-5.7.26 Authentication results: 550-5.7.26 DKIM = did not pass 550-5.7.26 SPF [xxxxxx.com] with ip: [2a01:111:f400:fe1e::728] = did not pass 550-5.7.26 For instructions on setting up authentication, go to 550 5.7.26 https://support.google.com/mail/answer/81126#authentication 6a1803df08f44-6ae4b416ab0si85203426d6.346 - gsmtp'
Original message headers:
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=biAtPmNZ/LaxEK6oNmV9c53LtHqgl3OQP3rWwtCevspx/mjw1EMBvmh4KzT+lGorrSagm95Nx9C5BXwWrv6V1BbXaZYZ8OMke/gFWXhk5fljxjnOvNtT9zDrO6sV+mnAl5mWfLHbnjV1uIXGWUG6Og7sNaOxcTo0zoc2n9qx2+qkRF6BLTq/kjHtYUQCi5APLKooF2fkCa0MJ+icOJRFqInUrSHE2Vc3xlPT/iWU1jOSg9eRDgVrlq7iBu4I+c1FdQOQlNj1OaLo1gIElVBl0BMCERvNkrVA+P/zJfgjT4V9z9voqmXgAB7hZ5MH10/LCI/pzY0GHsAdzucFOyqxfw==ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OsqzM2Cq/j4WaSWjXDk5WILYS6YmSmSAWJlIj56xkN4=; b=llDLukiByQk12bUAxRMho2pkkNVCRKCNJbABRFKwFbFXpQV5oKjocyIFnCFS/AeyjF2BDQiXcVbS4B+yTlbk6UhgO6s2XkuPWCApjyo9ziuUslM3880xKvUU0Qso77haF2oIg35ojAou6Kd9thmIajLjmcm4DrWssmC+E/Xrh5mbB4lqqzm+SSOHLpo6kB4jrfXI+gs57QrpZQ19wNpgfEakHIDHUhex+kcnZgKnoRPS7uD0UTgwdNrI/vP3jW1TJRFnzXTQs0lEmdsSfq92VRP0Ki89o1vWVOddMWTGW+NjoCPGPFlCUjTl+aLeR2D7TYI+2gVkPrpRSmGyo84m6g==ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=xxxxxx.com; dmarc=pass action=none header.from=xxxxxx.com; dkim=pass header.d=xxxxxx.com; arc=noneDKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xxxxxx.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OsqzM2Cq/j4WaSWjXDk5WILYS6YmSmSAWJlIj56xkN4=; b=NBFObzF6bN2RfA+WwC78rAePUCvDA2/YXeLC2wjhxi9lV4NkVDxW3slBwITag/EUsOoAn87yre9YaGoK2Gw4YIJZN/rJGh4ce8JAolGLIc1XZXr+DaAuYpNkIXPj5L26ICh2C6eBAPiEpdBUXOSDBZPiyC+A822DVlKZcmpXombbv2Y07Oo/IWafV+GunZRaRa+TmvHzGnHogDGBhD2ZJMNr44Rur2cgfluHQ6ybCgKuj2p0YlP30t98iEkRKfCwpx0bP+kXco3fcxIz85baomDw3HR/iiLcrAvGUWxLb34I+Ijxdnrn665VdB9d0bMZ4otkGql/GsYLCx/AnqkwkQ==Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=xxxxxx.com;Received: from AM6PR09MB3399.eurprd09.prod.outlook.com (2603:10a6:20b:d9::17) by DU0PR09MB5907.eurprd09.prod.outlook.com (2603:10a6:10:3ea::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.27; Mon, 3 Jun 2024 12:29:59 +0000Received: from AM6PR09MB3399.eurprd09.prod.outlook.com ([fe80::22bf:c280:4419:4133]) by AM6PR09MB3399.eurprd09.prod.outlook.com ([fe80::22bf:c280:4419:4133%4]) with mapi id 15.20.7633.021; Mon, 3 Jun 2024 12:29:59 +0000From: "xxxxxx" <email address removed for privacy reasons>To: email address removed for privacy reasonsDate: 3 Jun 2024 14:29:59 +0200Subject: SubjectContent-Type: multipart/mixed; boundary=--boundary_967_6af500b3-6092-49e7-8463-646cb3d6ac7cX-ClientProxiedBy: MM0P280CA0002.SWEP280.PROD.OUTLOOK.COM (2603:10a6:190:a::27) To AM6PR09MB3399.eurprd09.prod.outlook.com (2603:10a6:20b:d9::17)Return-Path: email address removed for privacy reasonsMessage-ID: <email address removed for privacy reasons>MIME-Version: 1.0X-MS-PublicTrafficType: EmailX-MS-TrafficTypeDiagnostic: AM6PR09MB3399:EE_|DU0PR09MB5907:EE_X-MS-Office365-Filtering-Correlation-Id: 90b95f77-3289-41ba-cd3e-08dc83c8e22eX-MS-Exchange-SenderADCheck: 1X-MS-Exchange-AntiSpam-Relay: 0X-Microsoft-Antispam: BCL:0;ARA:13230031|366007|52116005|1800799015|376005|38350700005;X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?nA1m6WXTBdNqlaNQGutxzUfMvwkFiUR1mLHugzqZnkxIpvYNC/netSnW7MYb?= =?us-ascii?Q?E7L96OIo91gDO5935TPOKgwl+Qw3UNwjHwP0S9hNJ3VqSaUBiin0eD9UslGH?= =?us-ascii?Q?2rKmiHI2uXrq4STtwrxNkzuqpsbIE5h8Jw9vUaz5G5485u/TlNe5gZhzpcdG?= =?us-ascii?Q?uXmKZffMNXkPemEUoED+hqrKBsAYHNkAJ02njxDBqT1TdgKqkPeKmSEyoZP/?= =?us-ascii?Q?qP3kXUGYZQYJTRq8hOINyGoB0HwiryABOj/0TTortFOPT7jHnwKEbw1A5N3w?= =?us-ascii?Q?vqQtQLg6SQG1CD+ZYdCwq+dcxM0XnQ3unNqcS7UuFRsws61MENZ5a+efuhUy?= =?us-ascii?Q?oELRO1afqO3fWjROe9Zi/y+VZUx/kkbWKN3e4g6N+oKdXi6J/VLSl0RN5iys?= =?us-ascii?Q?be34nmfhxb46J4nEJWkh18gDSFkBhioIQl/rLOUlAAqncox5B7tN1i3BTjQn?= =?us-ascii?Q?0JrO+kzwwJ8rMR/oZ/0GsavW02rKLh1MjbLmTBomKn99sRiGywoivLBmj37l?= =?us-ascii?Q?cP2qZJV9MEArllLX55wnu9zu0Of10mJzhKSs4BVdsXkT5znLBJfzXX4tr5AC?= =?us-ascii?Q?ZwEeuExu9FK4vChxt2FTkNVFLTTIzNr/bDNMe2GT5aERuhESXMDqpLo5o46T?= =?us-ascii?Q?d+DgGZYezQpySIfJh9aX0lbMcgE9HnueqWG+Y7GXsl8fdidLHQ6DHL7jm2/C?= =?us-ascii?Q?p/05picw/tYZDPhtWUeB28buETqDuF9+lf3/Iv5sQveabt5T05Mnx/elpHAI?= =?us-ascii?Q?9CBosLUbLPkbf2Kmcp/YnLujL8DtOAMD/bR2IEvI0CJCeteoMkCIDbmIzNQL?= =?us-ascii?Q?2+zm+IJg961lMvPoc0kPULbIn++aIjnkV9s0p80cgQ2qniXm3ReuQzzOFH1Q?= =?us-ascii?Q?eNl18RqdjIVW10/r9VivYIZxJmZ6aB0pI6tH83wgV3KG0SsrWSx2rZTk+F+z?= =?us-ascii?Q?GzThll8OjGayIh3ERPDzfLGiZWD85dQq+W3byTvas6YFp8mT6sAZ+xjfnoSx?= =?us-ascii?Q?Y7bi3L7YO5i4g0ojua7o7xjUEKh7HRdFg1m8lKs3QZfHmUaeefs6+cXb1B4T?= =?us-ascii?Q?eDDxygPCO+mKoegwiOccaMRx0JvQr0JM9gOd52zLYEDL9SeGKn2N/6sA70zB?= =?us-ascii?Q?1JEMo6c8YvR8Wd+P+slQPn01QQUKEeMHtCMX0Kq5NkRepKrcee7e/8wFEs1c?= =?us-ascii?Q?CG0bGWsVB94QjEaJYdMGSGqTn+IgCw2vyeRpJZ7jT9eUy91zfThlyI/Csi/z?= =?us-ascii?Q?dfH9x/YKVsdJQicz7E3z9ueKeTWlc83DZCXnKgXZCg=3D=3D?=X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6PR09MB3399.eurprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(366007)(52116005)(1800799015)(376005)(38350700005);DIR:OUT;SFP:1102;X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?ATrbAvRbE05JDalT0FuLUzGxPCcs/uZVq5BQo3oJkU7CMpywCfd5vVhMVr3k?= =?us-ascii?Q?L8iIxlUm3GBmhR9QTKWFQGldk92ozJFHM6EZrHE8vB/lypjgnL/o30xEuWT9?= =?us-ascii?Q?EW1f3PaJ5PwdiDpeqUZN4sbtpCmyIWjybMhzH8BR634qZpJWHJPUdRS5rAbN?= =?us-ascii?Q?tTelZcDidHE4tzftGmR3KM0hyprBUjacorouZMXg0k0r7XsBnD7AarNNIHvQ?= =?us-ascii?Q?NaEy2ZC+Qs5WFqW29knQZrjgGz/DLVyLiUfgzaJnY3RM0lqd6n8kxw1jJfG7?= =?us-ascii?Q?ZXqY8XYnXgpEN9AOwvWPltlZjlpmCMnD0iSTlj9xTAI1M2Et4Z2QKQhn4kIf?= =?us-ascii?Q?mH7SYKl+J+O3xsPzvb6tQrWAh8dUUfxX79taezb74Tp8cgnhFNjd7mnKUpnZ?= =?us-ascii?Q?AkqFosey8q5rbxKDuBCHyl+PnMEYUn3t6HmptuJLY/ppRLJAJAicB+jR12mY?= =?us-ascii?Q?4nxd1pMpflzlJ/dQrCErtaRChQkKcGxicHIg84ewV3729ptwg6qwRDi2qeec?= =?us-ascii?Q?G+hd3XGxONYcAHR+UvUxov04IvwbuJ+T1ME+brnAGJl2xCMIIG9rWJrmlCFt?= =?us-ascii?Q?xza6LM296YEIWiyY1iN/7ZbF5eVDyVMv7swNOiW8FFqmrQ8S+1VF9BiOyM3A?= =?us-ascii?Q?HPqvgEmEYeBfJ1GTU0pPetpm1n0XAJnFCmaPm4Fc0hgg+iiTVmqMI8mfZJgK?= =?us-ascii?Q?aJvkJVvqKDnGKw8RMp3+iosSwlxwI/j2QwTJ0A8hRDjamuslWuR+lqzMCwjX?= =?us-ascii?Q?3j2GDz2nEXc45OclQ4SZAMlUK27B+2GBbFEMyxtGEx+Z5tIY/SQYibeuEpSY?= =?us-ascii?Q?1BjhYdNXph7NVb2c8g4iK4BcUeP2sOXuv47BAOwMQLN5/kdj1DWfCN16VNAS?= =?us-ascii?Q?Oljzsuc/5K3eZd6RhTD+TifNs6TUyQ4NHdpaB8Rkmp0SNF4tl/Vn3HLO1UXF?= =?us-ascii?Q?HUV2psvRCi/cpfVpiqE4Arxm5OKlNSvJBA8x1sYAfLI48yEAY9pIQIIPHEac?= =?us-ascii?Q?L/d/nMn5IrnLAUEM+fn5YvTSxllujXIReTS/UBDOz/X19GfPb8FEHarviX1z?= =?us-ascii?Q?qMYJsET5Y60o3IyhOK3JsCUmVUVVesz7g2+VflLBeR6Iu/MCmV+ynliphTHq?= =?us-ascii?Q?/cOWXVt4AJiU/DxUFfz8TK3ZQTchT0p/OHO8ij9X5OUV5ETJEa1ZbqGbdzS+?= =?us-ascii?Q?cBTOZTYMVs369nBliMv69GebgWd2YyQYSMMJIc/KA2gwg2uc3C10DZooHhc8?= =?us-ascii?Q?9SNOR64IJ8HYoF3eUQM1JkNE6tMbqByxdkXDozanpTcXHxxApG8XRZH+NHKX?= =?us-ascii?Q?wQn3CaIM5Hm//G6yyG/nXjv/89/wOTL2BYg0X7EzAATVtgaNIeNGa6RkTA8P?= =?us-ascii?Q?yOVaVG8rHOc+xvzPRRKVqsJXmJOap4WGA4QnhPjf5XfDTYGUxYVilB4GGe+e?= =?us-ascii?Q?JoWcurOYc12jYkIsA461Fg1y7DQ7BXxgUd/l0xF16+/LVzq4Pi54GS6jsStp?= =?us-ascii?Q?gOq3mtzWOuY7eqLwNHmLhBej28BZyLxOLtUcsGXuILnzEKsKeLUXBdxQasFp?= =?us-ascii?Q?bLRCiIX5BWYbMIBlVf3cFtbtTLBifr2y2A1fUHUe?=X-OriginatorOrg: xxxxxx.comX-MS-Exchange-CrossTenant-Network-Message-Id: 90b95f77-3289-41ba-cd3e-08dc83c8e22eX-MS-Exchange-CrossTenant-AuthSource: AM6PR09MB3399.eurprd09.prod.outlook.comX-MS-Exchange-CrossTenant-AuthAs: InternalX-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jun 2024 12:29:59.2945 (UTC)X-MS-Exchange-CrossTenant-FromEntityHeader: HostedX-MS-Exchange-CrossTenant-Id: aeae03e2-c36b-4329-a44e-a03d2e86e008X-MS-Exchange-CrossTenant-MailboxType: HOSTEDX-MS-Exchange-CrossTenant-UserPrincipalName: wcgBbOlkctMDAcdbplZTtKmkAwly6c3hmCMas7x9xjVjASUDdPhsJTswl5wD+aXUYTGhk7eEFXpgDdMKline/g==X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR09MB5907
When I login to the mailbox manually and send a mail to a Gmail it passes everything.
Does anyone know where to look?