spf issues with SES - get a bounce sending email

0

I just started using SES this past week and had an issue with email bounce. I took the header of the email and put in mxtoolbox.com and it gave me a spf error

v=spf1 include:amazonses.com -all Error: SPF Alignment -- Domain not found in SPF

I also got a dkim Signature error

v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=kra23psoka5qyyh6gdejiiuof3nluwuz; d=amazonses.com; t=1708614656; h=Date:From:To:Subject:Cc:MIME-Version:Content-Type:Message-ID:Feedback-ID; bh=fA/nRNWtRSqBjs/BXvFP2Sh+0c9ZAHRUXwRrcUCBQo4=; b=BWjNf3vnPQGFeYTLWTTOl6Q5ehTgH3XBgEHTRX1RG3LBg7L4vypc5+uJEi3RCLBf aYthQwxb6Vu3zKLiW+eWhoveJQ8Dd+eCFeO4A4Byn5MfbURjVLZEhD3Ukp5jdvz6n/U /AUDFRN0gCGuYjNAS59ARer2KHWl+Gc1pHCaBkf4=

With this information, how do I fix this? Am I supposed to add this to my domain or is there an area in SES that I fix this.

Super appreciate any help I can get with this.

asked 8 months ago329 views
1 Answer
0

Hello.

Did you configure Easy DKIM when performing domain authentication?
https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dkim-easy.html

The SPF record should be set to "amazonses.com" by default, so I think it will pass checkers.
However, if you want to set MAIL FROM with your custom domain, you will need to set up an SPF record.
https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-spf.html

Messages that you send through Amazon SES automatically use a subdomain of amazonses.com as the default MAIL FROM domain. SPF authentication successfully validates these messages because the default MAIL FROM domain matches the application that sent the email—in this case, SES. Therefore, in SES, SPF is implicitly set up for you.

However, if you don't want to use the SES default MAIL FROM domain, and would rather use a subdomain of a domain that you own, this is referred to in SES as using a custom MAIL FROM domain. To do this, it requires you to publish your own SPF record for your custom MAIL FROM domain. In addition, SES also requires you to set up an MX record so that your custom MAIL FROM domain can receive the bounce and complaint notifications that email providers send you.

profile picture
EXPERT
answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions