How to solve the problem with SPF?

Question

linux

Hello,

There are records for the domain as follows.

domain.ru TXT v=spf1 ip4:000.000.000.00 a:domain.ru -all
domain.ru TXT v=DKIM1; g=*; k=rsa; p=публичный ключ

When you try to send mail to any server (with rare exceptions), everything is OK:

Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 000.000.000.00 as permitted sender)

But Yandex sends this:

spf=fail (mxfront19.mail.yandex.net: domain of domain.ru does not designate 000.000.000.00 as permitted sender) [email protected]

Please tell me where to dig and what to fix?

Answer 1

Do you have more detailed logs?
and just in case, check the clock on the server, I had an option with DKIM, if the clock was wrong, then there could be a fail

Answer 2

Does DKIM work for you? You incorrectly declared the public key in DNS.
The DKIM public key must be specified in DNS as follows:

SELECTOR._domainkey      TXT        "v=DKIM1; g=*; k=rsa; p=..."

SELECTOR - your selector from the opendkim config or whatever is responsible for it.
The result will be SELECTOR._domainkey.nepofigizm.ru
Maybe because of this, Yandex does not process the entry properly.