Anti-Spoofing Protection & MailChimp

%3CLINGO-SUB%20id%3D%22lingo-sub-1207775%22%20slang%3D%22en-US%22%3EAnti-Spoofing%20Protection%20%26amp%3B%20MailChimp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1207775%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20use%20MailChimp%20to%20send%20out%20campaign%20emails%20to%20thousands%20of%20people%2C%20a%20lot%20of%20which%20are%20part%20of%20our%20internal%20organization.%26nbsp%3B%20We%20have%20SPF%2C%20DKIM%20set%20up%2C%20and%20it%20appears%20they%20are%20passing%2C%20but%20the%20anti-spoofing%20protection%20sends%20about%20half%20of%20the%20emails%20to%20the%20Junk%20folder%20in%20our%20user%20inboxes.%26nbsp%3B%20There%20doesn't%20seem%20to%20be%20any%20consistence%20to%20it%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20found%20in%20the%20message%20headers%3C%2FP%3E%3CP%3E...compauth%3Dfail%20reason%3D601%3C%2FP%3E%3CP%3E...CTRY%3AUS%3BEFV%3ANLI%3BSFV%3ASPM%3B...%3C%2FP%3E%3CP%3E...PTR%3Amail247.suw121.mcdlv.net%3BMX%3A1%3BA%3A1%3BCAT%3ASPOOF%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20am%20I%20missing%20here%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1207775%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1211413%22%20slang%3D%22en-US%22%3ERe%3A%20Anti-Spoofing%20Protection%20%26amp%3B%20MailChimp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1211413%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F573690%22%20target%3D%22_blank%22%3E%40DMcGehee%3C%2FA%3E%26nbsp%3BHi%2C%20did%20you%20include%20MailChimps%20servers%20to%20your%20SPF%20record%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1211423%22%20slang%3D%22en-US%22%3ERe%3A%20Anti-Spoofing%20Protection%20%26amp%3B%20MailChimp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1211423%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1111%22%20target%3D%22_blank%22%3E%40Pavel%20Otych%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20do%20have%20the%20TXT%20records%20in%20the%20domain%20for%20SPF.%26nbsp%3B%20There%20are%20no%20CNAME%20records%20for%20DKIM.%26nbsp%3B%20Could%20that%20cause%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3ETXT%3C%2FTD%3E%3CTD%3Egxxxxxxxn.com%3C%2FTD%3E%3CTD%3Ev%3Dspf1%20include%3Aservers.mcsv.net%20include%3Aspf.protection.outlook.com%20-all%3C%2FTD%3E%3CTD%3E3599%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3ETXT%3C%2FTD%3E%3CTD%3Egxxxxxxxn.com%3C%2FTD%3E%3CTD%3EMS%3Dms45659264%3C%2FTD%3E%3CTD%3E3599%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1211956%22%20slang%3D%22en-US%22%3ERe%3A%20Anti-Spoofing%20Protection%20%26amp%3B%20MailChimp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1211956%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F573690%22%20target%3D%22_blank%22%3E%40DMcGehee%3C%2FA%3E%26nbsp%3BThe%20record%20seems%20to%20be%20correct%20based%20on%20MailChimp%20documentation%20at%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmailchimp.com%2Fhelp%2Fset-up-custom-domain-authentication-dkim-and-spf%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmailchimp.com%2Fhelp%2Fset-up-custom-domain-authentication-dkim-and-spf%2F%3C%2FA%3E%26nbsp%3BAlso%20the%26nbsp%3Bmail247.suw121.mcdlv.net%20(198.2.185.247)%20is%20part%20of%20the%20IP%20range%20specified%20at%20MailChimp%20servers%20(%3CSPAN%3E198.2.128.0%2F18)%26nbsp%3B%3C%2FSPAN%3Eso%20SPF%20check%20shouldn't%20be%20failing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHard%20to%20say%20really.%20Try%20adding%20the%20DKIM%20records%20%2B%20signing%2C%20it%20could%20help.%20Also%2C%20I%20suggest%20you%20add%20a%20DMARC%20record.%26nbsp%3B%20However%2C%20there%20doesn't%20seem%20to%20be%20much%20more%20you%20can%20do%20about%20it.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

We use MailChimp to send out campaign emails to thousands of people, a lot of which are part of our internal organization.  We have SPF, DKIM set up, and it appears they are passing, but the anti-spoofing protection sends about half of the emails to the Junk folder in our user inboxes.  There doesn't seem to be any consistence to it either.

 

I have found in the message headers

...compauth=fail reason=601

...CTRY:US;EFV:NLI;SFV:SPM;...

...PTR:mail247.suw121.mcdlv.net;MX:1;A:1;CAT:SPOOF;

 

What am I missing here?

3 Replies
Highlighted

@DMcGehee Hi, did you include MailChimps servers to your SPF record? 

Highlighted

@Pavel Otych 

 

We do have the TXT records in the domain for SPF.  There are no CNAME records for DKIM.  Could that cause this?

 

TXTgxxxxxxxn.comv=spf1 include:servers.mcsv.net include:spf.protection.outlook.com -all3599
TXTgxxxxxxxn.comMS=ms456592643599
Highlighted

@DMcGehee The record seems to be correct based on MailChimp documentation at https://mailchimp.com/help/set-up-custom-domain-authentication-dkim-and-spf/ Also the mail247.suw121.mcdlv.net (198.2.185.247) is part of the IP range specified at MailChimp servers (198.2.128.0/18) so SPF check shouldn't be failing.

 

Hard to say really. Try adding the DKIM records + signing, it could help. Also, I suggest you add a DMARC record.  However, there doesn't seem to be much more you can do about it.