MailPoet Sending Service using wrong domain in Envelope-From

Hello @hilltothesouth ,

Thank you for contacting MailPoet support. I will be happy to help you with this.

Users sending with MailPoet’s Sending Service usually don’t need to set up their own SPF or DKIM, as messages will automatically have MailPoet Sending Service’s SPF set up and will be signed with MailPoet Sending Service’s DKIM.

Can you send over the name of your website so I can check your records?

Looking forward to hearing back from you.

Have a great day.

Sure, @geraltrivia (hey, nice username). Is there any way I can send that information to you in private? Let’s just say I’m a bit paranoid about posting information publicly.

Thanks.

Hello again @hilltothesouth ,

Certainly! Please contact us via https://www.mailpoet.com/support/sales-pre-sales-questions/ and include a link to this thread.

We’ll be able to provide you with more information there.

Cheers!

Hi
I’m also getting SPF alignment fails. How do I fix SPF alignment? DKIM and DMARC passed.

DMARC Compliance SPF DKIM
2 29 100.00% Authentication Alignment Policy Authentication Alignment Policy
IP Address Email Volume Pass Fail Rate Pass Fail Pass Fail Pass Pass Fail Pass Fail Pass
176.9.183.143 28 28 0 100.00% 28 0 0 28 0 28 0 28 0 28
176.9.183.137 1 1 0 100.00% 1 0 0 1 0 1 0 1 0 1

My emails are going to spam folder. I have made some changes based on knowledge base. Still not working. My site is karenjadams.net The following is the most recent spam test result:

You're not fully authenticated
We check if the server you are sending from is authenticated
 [SPF] Your server 176.9.183.143 is authorized to use [email protected]
 Your DKIM signature is valid
 Your domains are not aligned. We can't check DMARC.
A DMARC policy allows a sender to indicate that their emails are protected by SPF and/or DKIM, and give instruction if neither of those authentication methods passes. Please be sure you have a DKIM and SPF set before using DMARC.
Before using DMARC, you should make sure the domains used in the Envelope From (e.g., Return-Path or Mail-From), the "Friendly" From (i.e., "Header" From) and the d=domain in the DKIM-Signature are the same
DMARC DNS entry found for the domain _dmarc.karenjadams.net:

"v=DMARC1; p=none"
Verification details:

mail-tester.com; dmarc=none header.from=karenjadams.net
mail-tester.com; dkim=pass (2048-bit key; unprotected) header.d=sendingservice.net [email protected] header.b=dtOruzj9; dkim-atps=neutral
From Domain: karenjadams.net
DKIM Domain: sendingservice.net

Your help is greatly appreciated. K

I am having the same issue. Can you help me with this?

Regards ?sa

@asabo @firstfitnut @chanecullens

I see this thread hasn’t been replied to in more than a month, so I’ll tell you what I’ve learned.

After sending one of their support engineers some sample emails from my domain that failed SPF alignment, this is the response I got back:

I talked to our devs about it and I confirmed that we do not provide SPF alignment with our Sending Service so what you are seeing is expected and it shouldn’t be an issue.

MailPoet Technical Support

Because of this, I decided to forego using SPF at all, since DMARC requires only one of SPF and DKIM to pass anyway. So I set up DKIM with the Sending Service, and set my SPF policy to the following: v=spf1 ?all. This means that all IP addresses neither pass nor fail SPF (neutral result). This essentially forces DMARC checks to rely exclusively on DKIM alignment, which works perfectly fine with the Sending Service.

DKIM also works better when emails are forwarded anyway, so I think this is ultimately a better setup, with or without the Sending Service.

Thanks to MailPoet Support for taking time from their devs to answer this question for us free tier users.

Thank you for your answer. I will try this.

Have a lovely holliday!