Why is mail not sent to @ukr.net?

Question

Mail server

Hello!

There is a problem with sending response letters to email addresses @ukr.net (address is correct) from domain mail. The rules for setting up the SPF domain according to the instructions , but did not give any result.

Does anyone know how this issue can be resolved?

From: Mail Delivery System [email protected] Subject: Mail delivery failed: returning message to sender Date: November 18, 2020 at 12:29:20 AM GMT+3 To: [email protected]

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

[email protected] host mxs.ukr.net ( mxs.ukr.net ) [212.42.75.251] SMTP error from remote mail server after RCPT TO:[email protected] : 550 sender domain SPF exact match mandatory for 92.53.116.15 Reporting-MTA: dns; smtp.timeweb.ru ( smtp.timeweb.ru )

Action: failed Final-Recipient: rfc822;[email protected] Status: 5.0.0 Remote-MTA: dns; mxs.ukr.net ( mxs.ukr.net ) Diagnostic-Code: smtp; 550 sender domain SPF exact match mandatory for 92.53.116.15

Answer 1

SPF needs to be changed. Two options, if you use MailChimp, then to the value "v=spf1 include:servers.mcsv.net ip4:176.57.223.0/24 ip4:92.53.116.0/22 ​​a ~all"
If not, then to the value "v=spf1 ip4:176.57.223.0/24 ip4:92.53.116.0/22 ​​a ~all"
DKIM one is clearly incorrect, you can do this - first add one after m to the subdomain of the first one (it will turn out dkim1._domainkey) and test you through mail-tester.com interested in the third block - "You have successfully authenticated"
Then remove the first DKIM one and add it to the second and test again. At the same time, we will check my SPF.

Answer 2

Your SPF allows sending only from mx1.timeweb.ru/mx2.timeweb.ru, and timeweb uses other servers for sending. Configure SPF according to timeweb recommendations
https://timeweb.com/ru/help/pages/viewpage.action?...

Answer 3

This does not work, as I see from the logs, write to timeweb support and she will tell you what the entry should be or use third-party services like sendpulse or amazon ses.

Answer 4

timeweb has incorrectly configured spf records.