Project

General

Profile

Actions

tickets #134300

open

DKIM/SPF situation wrt gmail

Added by crameleon 11 months ago. Updated 11 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
2023-08-15
Due date:
% Done:

0%

Estimated time:

Description

Hi,

splitting this out of https://progress.opensuse.org/issues/132197, emails from SUSE to Google mailservers bounce:

550-5.7.26 This mail is unauthenticated, which poses a security risk to the 550-5.7.26 sender and Gmail users, and has been blocked. The sender must 550-5.7.26 authenticate with at least one of SPF or DKIM. For this message, 550-5.7.26 DKIM checks did not pass and SPF check for [opensuse.org] did not 550-5.7.26 pass with ip: [2001:67c:2178:6::1c]. The sender should visit 550-5.7.26  https://support.google.com/mail/answer/81126#authentication for 550 5.7.26 instructions on setting up authentication. r14-20020adff10e000000b003141e952e3csi6435517wro.1036 - gsmtp (in reply to end of DATA command))


$ dig opensuse.org TXT|grep spf
opensuse.org.       1780    IN  TXT "v=spf1 include:_spf.opensuse.org ?all"
$ dig _spf.opensuse.org TXT|grep ^_spf
_spf.opensuse.org.  287 IN  TXT "v=spf1 ip4:91.193.113.64/27 ip4:143.186.213.0/24 ip4:147.2.0.0/16 ip4:149.44.0.0/16 ip4:195.135.220.0/23 ip6:2001:67c:2178:8::/64 ip6:2a01:138:a004::/64 ip6:2a07:de40:401::/64 mx ?all"
  1. Any objections to me adding the IP addresses of smtp-out{1,2}.suse.de there?
  2. What is our DKIM situation, I noticed some resolved tickets with the same issue in the past but couldn't quite find if it's supposed to be configured.
Actions

Also available in: Atom PDF