Emails aren't delivered (Transient bounce) with 550 Rejected by header based Anti-Spoofing policy

Question

Hello,

I tried to setup emails sending for my environment. I have my domain name (let it be .com) registered in AWS Route 53. I have verified domain and email address noreply@.com in SES Identities.

I have tried to send emails to different email addresses. Most of them are delivered successfully, but all emails to addresses on my domain @.com have never arived. From Virtual Deliveratility Manager I can see that diagnostice code is - smtp; 550 Rejected by header based Anti-Spoofing policy: noreply@.com.

I have added SPF rule for my domain record to include amazonses.com as allowed domain (because initally I have not used custom MAIL FROM), but unfortunatelly it didn't help.

Than I have tried to add custom MAIL FROM. I have added subdomain - notifications..com . But recipients with @.com email addresses still doesn't receive email with the same diagnostic code.

Could someone please help me with this? Did I miss some configuration?

Tracy H · Answer

Your email server is configured to send mail for @.com, so it thinks the SES emails are spoofed.  
  
In addition to the [SPF](https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-spf.html) record you created, [DKIM](https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dkim.html) and [DMARC](https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dmarc.html) records will help with email authentication.
  
DKIM records are specially formatted DNS TXT records that store the public key the receiving mail server will use to verify a message's signature. Your email provider can often make DKIM records available to you. 
  
Some inbox providers, such as Google and Yahoo, require DMARC, DKIM, and SPF to be fully set up on any domain sending bulk emails to their users. If you don't meet these requirements, emails from your domain may be bounced.
  
Take a look at the Amazon SES documentation for [email authentication methods](https://docs.aws.amazon.com/ses/latest/dg/email-authentication-methods.html). That might help you identify the problem.  
  
If you can share who your email provider is, I might be able to provide more information.

Emails aren't delivered (Transient bounce) with 550 Rejected by header based Anti-Spoofing policy

Contenido relevante