I'm trying to figure out why I'm receiving SPF failure messages even though I think my SPF records are set up correctly. Almost all of my emails go through without issues, but certain organizations send back errors. We're using Barracuda's cloud service for email filtering, and I included an example of a failure message I received. The domain in the record resolves to the IP address listed, and that IP is in my SPF record, so I'm puzzled as to why it shows up as a fail. Can anyone shed some light on this or suggest resources to help me out?
1 Answer
The SPF failure is likely due to the email being sent with the `RFC5321.MailFrom` domain `outbound-ip138b.ess.barracuda.com`, which doesn't have an SPF record. That's why you're seeing the result as `none`. Even though the message passed the DKIM signature, there's no alignment between the `RFC5321.MailFrom` and your `RFC5322.From` domains.
So there's actually an SPF check happening there? I didn't realize! Why would Barracuda change the `RFC5321.MailFrom` to themselves instead of keeping it as my domain?