如何设置 spf 记录以将邮件从 google 托管应用程序发送到 gmail 地址

如何设置 spf 记录以将邮件从 google 托管应用程序发送到 gmail 地址

我正在尝试弄清楚为什么我从我拥有的一个域发送的电子邮件被我拥有的另一个域拒绝,虽然我认为这可能与我设置 spf 记录的方式有关,但我不确定需要采取什么步骤来解决这个问题。

这是我收到的错误消息:

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550-Verification failed for <[email protected]>
550-No Such User Here
550 Sender verify failed (state 14).

以下是[电子邮件保护]

Delivered-To: [email protected]
Received: by 10.86.92.9 with SMTP id p9cs85371fgb;
        Wed, 2 Sep 2009 22:33:32 -0700 (PDT)
Received: by 10.90.205.4 with SMTP id c4mr2406190agg.29.1251956007562;
        Wed, 02 Sep 2009 22:33:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from verifier.port25.com (207-36-201-235.ptr.primarydns.com [207.36.201.235])
        by mx.google.com with ESMTP id 26si831174aga.24.2009.09.02.22.33.25;
        Wed, 02 Sep 2009 22:33:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 207.36.201.235 as permitted sender) client-ip=207.36.201.235;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 207.36.201.235 as permitted sender) [email protected]; dkim=pass [email protected]
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=auth; d=port25.com;
 h=Date:From:To:Subject:Message-Id:In-Reply-To; [email protected];
 bh=GRMrcnoucTl4upzqJYTG5sOZMLU=;
 b=uk6TjADEyZVRkceQGjH94ZzfVeRTsiZPzbXuhlqDt1m+kh1zmdUEoiTOzd89ryCHMbVcnG1JajBj
   5vOMKYtA3g==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=auth; d=port25.com;
 b=NqKCPK00Xt49lbeO009xy4ZRgMGpghvcgfhjNy7+qI89XKTzi6IUW0hYqCQyHkd2p5a1Zjez2ZMC
   l0u9CpZD3Q==;
Received: from verifier.port25.com (127.0.0.1) by verifier.port25.com (PowerMTA(TM) v3.6a1) id hjt9pq0hse8u for <[email protected]>; Thu, 3 Sep 2009 01:26:52 -0400 (envelope-from <[email protected]>)
Date: Thu, 3 Sep 2009 01:26:52 -0400
From: [email protected]
To: [email protected]
Subject: Authentication Report
Message-Id: <[email protected]>
Precedence: junk (auto_reply)
In-Reply-To: <[email protected]>

This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com.  The service allows email senders to perform
a simple check of various sender authentication mechanisms.  It is provided
free of charge, in the hope that it is useful to the email community.  While
it is not officially supported, we welcome any feedback you may have at
<[email protected]>.

Thank you for using the verifier,

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         neutral
Sender-ID check:    pass
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname:  fg-out-1718.google.com
Source IP:      72.14.220.158
mail-from:      [email protected]

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: [email protected]
DNS record(s):
    stemcel.co.uk. 14400 IN TXT "v=spf1 include:aspmx.googlemail.com ~all"
    aspmx.googlemail.com. 7200 IN TXT "v=spf1 redirect=_spf.google.com"
    _spf.google.com. 300 IN TXT "v=spf1 ip4:216.239.32.0/19 ip4:64.233.160.0/19 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ip4:74.125.0.0/16 ip4:64.18.0.0/20 ip4:207.126.144.0/20 ?all"

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: [email protected]
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: 

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions.  If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: [email protected]
DNS record(s):
    stemcel.co.uk. 14400 IN TXT "v=spf1 include:aspmx.googlemail.com ~all"
    aspmx.googlemail.com. 7200 IN TXT "v=spf1 redirect=_spf.google.com"
    _spf.google.com. 300 IN TXT "v=spf1 ip4:216.239.32.0/19 ip4:64.233.160.0/19 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ip4:74.125.0.0/16 ip4:64.18.0.0/20 ip4:207.126.144.0/20 ?all"

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.2.5 (2008-06-10)

Result:         ham  (-2.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS               SPF: sender matches SPF record
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message

我已经为我的域名注册了 spf 记录,正如这里所建议的

两个域名都通过验证Kitterman 的 spf 记录测试工具,所以我对此有点困惑。

我还在 stemcel.co.uk 域上设置了 catchall 地址,但没有为 chrisadams.me.uk 设置地址。

相反,我们有以下转发器设置

[email protected]  to  [email protected]   
[email protected]  to  [email protected]   
[email protected]     to    [email protected]   
[email protected]     to    [email protected]

有什么想法可以让它工作吗?我不确定我应该在这里寻找什么。

答案1

如果去掉 SPF 还会有效果吗?

我发现这样做弊大于利。它并不能阻止你收到垃圾邮件,只能(稍微)减少以你的名义发送垃圾邮件的人的反向散射。

答案2

您是否尝试过在 Google Apps 中启用“Catch-all Address”功能?如果您将其分配给用户名,您至少可以判断邮件是否到达了您域的 Google Apps 实例。由于从上述错误来看,Google Apps 似乎无法找到用户,因此这也许有助于诊断问题。

答案3

您是否使用 SPF 注册服务器作为您的外发邮件服务器,或者使用其他服务器(例如您本地 ISP 的服务器)?

答案4

您是否使用 GMail 的“帐户和导入”部分中的“以...身份发送邮件”通过 gmail 发送所有邮件?当我尝试通过我的 gmail 帐户作为我的另一个“适用于您的域的应用程序”帐户发送电子邮件时,遇到了同样的错误。我更改了我的用户帐户的密码,这就是它拒绝它的原因。它实际上是被 GMail 拒绝的,而不是被收件人的电子邮件服务器拒绝的。

相关内容