SPF misalignment

0

Using SES for email. SPF records in domain DNS include amazonses.com. However the IP that SES uses to send email is not included in the amazonses.com. Amazonses includes 199.255.192.0/22
199.127.232.0/22
54.240.0.0/18
69.169.224.0/20
23.249.208.0/20
23.251.224.0/19
76.223.176.0/20
54.240.64.0/19
54.240.96.0/19
52.82.172.0/22
however mails are sent from: 54.240.7.42 and 54.240.7.44 and 54.240.7.48

resulting in SPF failures. Unfortunately many providers use strong spam filters and reject, even with DKIM pass.

Can AWS update the include file?

Johan
已提問 2 年前檢視次數 410 次
1 個回答
0
  • 54.240.7.42
  • 54.240.7.44
  • 54.240.7.48

These IPs are covered under 54.240.0.0/18 (highlighted below). Can you share any of the SPF errors you're seeing and which providers are seeing the errors?

amazonses.com descriptive text "v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/19 ip4:54.240.96.0/19 ip4:52.82.172.0/22 -all"

profile pictureAWS
專家
Chris_G
已回答 2 年前
  • Both Microsoft and Google (the only ones who send me DMARC reports) are reporting SPF Fail.

  • I'm also having the same issue, for me the SPF is failing eventhough my SPF record has amazon SES here is my spf record : v=spf1 include:_spf.google.com include:amazonses.com ~all SPF Failed IP 54.240.7.34 54.240.7.22 54.240.7.25 54.240.7.13 54.240.7.24

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南