Forum Discussion
Email from domains with no SPF goin to junk
Hi!
Since a few days ago, emails from domains with no SPF are ending up in recipients Junk folder.
I have tried to add the domains to Trusted Domains in the spam filter, but it wont work.
Has there been any changes to how missing SPF is handled?
How can i "Trust" these domains even tho they are missing SPF?
SPF Hard fail is active and we are using Office 365 with APT.
Best Regards
Michael
Just wanted to share two blog posts from two very well know mvp here while we still wait from Microsoft for official statement.
https://practical365.com/blog/exchange-online-protection-anti-spoofing-false-positives/
This hit us too, and it seems like its ramped up through today. You can band-aid it by creating a rule which sets the SCL=-1 (Spam Confidence Level), but be sure to put a filter on that. This is definitely something in EOP. Domains without an SPF aren't a failed SPF check and shouldnt flag fraud protection.
I spammed myself tonight from various domains with and without SPF records and it didn't happen again, so if we're lucky they fixed it before the weekend.
We can now confirm that there were some changes server-side, a blog post with more details should be coming today from Microsoft. In the meantime, you can take a look at the following message on the Roadmap: https://products.office.com/en-us/business/office-365-roadmap?featureid=27049
- Thanks for your response!
I will wait for this blog post
I've been inundated with calls on this issue today, and created a support ticket. After spending a great deal of time on the phone with them, they're insisting that nothing has changed, and that domains without an SPF record have _always_ been sent to junk mail. Very frustrating....
- Because of this i don't like creating support tickets when i can avoid it...
- Are you finding sites with SPF's are going to Junk, as i mentioned in a previous comment, 2 office 365 (hosted exchange) accounts that have always worked perfectly in the past, that have no SPF record issues are suddenly giving this error.
365 to 365 should not be causing this problem, especially as SPF records are in place!David, I tried sending from another Office365 tenant last night (that does not have an SPF record in place), and got the same results as you - went right to junk mail with a spoofing alert. So inter-tenant mail appears to be affected if no SPF record is set.
Few others have been complaining about this and fellow MVP Steve Goodman has reached out to the Exchange PG to get some more info on this. I'll try to update this thread if we get any information, but you should consider opening a support case in the meantime.
You can also disable the SPF hard fail option as a workaround, at least temporary.
Hi,
There is certainly an issue somewhere, we've got around 100 Clients on 365 and the majority are reporting this. We've reported it to our MSP but they just blame SPF errors. Coming in one morning with a large queue of phonecalls all with the same issue points towards Microsoft changing something.
Even 365 to 365, when SPF's are in place and both 365's are perfectly happy domain/DNS wise are still getting the 'going to junk' issue.
Half the clients have the ATP turned on, whether that makes the difference?
