Spf=softfail how to set?

Question

SPF

Good afternoon. Please tell me, I have my own mail server out of the box. The problem is that when redirecting an incoming letter using a filter to yandex mail, the letter falls into spam.
[email protected](start)-> [email protected](redirect)-> [email protected](SPAM)
There is the following line in the email property:
Authentication-Results: iva3-bf649248480a.qloud-c.yandex.net ; spf=softfail (iva3-bf649248480a.qloud-c.yandex.net: transitioning domain of yandex.ru does not designate my server's external ip as permitted sender, rule=[~all]) [email protected]; dkim=pass [email protected]
Did I understand correctly that yandex swears at the sfp record?

Answer 1

And now what is written in spf?

Answer 2

you need to enable yandex to your ip

v=spf1 ip4:95.216.243.254 ip4:95.216.243.198 include:_spf.yandex.net ~all

Answer 3

astill33 , and your server's outgoing emails are signed with DKIM ? If not, install OpenDKIM on Linux, and get email authentication via DKIM.
With DKIM auto-forward, sender domain validation, unlike SPF validation, passes.
Did I understand correctly? Are messages sent by your server forwarded? Or does your server redirect other people's received letters?