1 Topic by Elcid_91

  • Elcid_91
  • Member
  • Offline
  • Registered: 2022-08-16
  • Posts: 2

Topic: Unable To Send To Gmail Accounts

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- 1.6.0
- downloadable installer
- Ubuntu 22
- PGSQL
- Nginx
- Manage mail accounts with iRedAdmin
-host gmail-smtp-in.l.google.com[142.250.9.26] said:
    550-5.7.26 This message does not pass authentication checks (SPF and DKIM
    both 550-5.7.26 do not pass). SPF check for [arrowleaftech.com] does not
    pass with 550-5.7.26 ip: [173.169.106.100].To best protect our users from
    spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26
     for more 550
    5.7.26 information. i127-20020a255485000000b00668cab05591si5389348ybb.668 -
    gsmtp (in reply to end of DATA command)
====

SPF set up in domain as a TXT entry with the value v=spf1 mx -all
DKIM is the default used during setup

What is it I am doing incorrectly?  Thanks!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 915

Re: Unable To Send To Gmail Accounts

if it fails, then something must be wrong

for spf, you can designate the IP explicit, but for dkim either the implementation is wrong/dns record is wrong, or it is not yet propagated

3 Reply by Elcid_91

  • Elcid_91
  • Member
  • Offline
  • Registered: 2022-08-16
  • Posts: 2

Re: Unable To Send To Gmail Accounts

This is how I resolved the issue....

Added SPF (as a TXT) record to DNS:  v=spf1 mx a ip4:xxx.xxx.xxx.xxx/32 -all  (x's represent my domain address)

Added DKIM key to DNS as a TXT record:

1) avavidd-new showkeys

2) copy everything between the parentheses and make it one line, removing the quotes. eg
v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYArsr2BKbdhv9efugBy...

3) create a TXT Record entry in DNS and call it dkim._domainkey.YOURDOMAIN.com and copy the above text to the value.

4) wait a few minutes and test:  amavisd-new testkeys.  Should come up with a pass.

This is how I set up my own in-house email server and I can now send to Gmail recipients.