By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

SPF misalignment

0

Using SES for email. SPF records in domain DNS include amazonses.com. However the IP that SES uses to send email is not included in the amazonses.com. Amazonses includes 199.255.192.0/22
199.127.232.0/22
54.240.0.0/18
69.169.224.0/20
23.249.208.0/20
23.251.224.0/19
76.223.176.0/20
54.240.64.0/19
54.240.96.0/19
52.82.172.0/22
however mails are sent from: 54.240.7.42 and 54.240.7.44 and 54.240.7.48

resulting in SPF failures. Unfortunately many providers use strong spam filters and reject, even with DKIM pass.

Can AWS update the include file?

Topics
Front-End Web & MobileBusiness Applications
Tags
Amazon Simple Email Service
Language
English
Johan
asked 2 years ago398 views
1 Answer
0
  • 54.240.7.42
  • 54.240.7.44
  • 54.240.7.48

These IPs are covered under 54.240.0.0/18 (highlighted below). Can you share any of the SPF errors you're seeing and which providers are seeing the errors?

amazonses.com descriptive text "v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/19 ip4:54.240.96.0/19 ip4:52.82.172.0/22 -all"

profile pictureAWS
EXPERT
Chris_G
answered 2 years ago
  • Johan
    2 years ago

    Both Microsoft and Google (the only ones who send me DMARC reports) are reporting SPF Fail.

  • Akhil
    3 months ago

    I'm also having the same issue, for me the SPF is failing eventhough my SPF record has amazon SES here is my spf record : v=spf1 include:_spf.google.com include:amazonses.com ~all SPF Failed IP 54.240.7.34 54.240.7.22 54.240.7.25 54.240.7.13 54.240.7.24

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content