Forwarding emails causes softfail on Gmail

[Victor12]

HI!

I setup an email account into my Plesk 12 to automatic forwarding all emails to an gmail address. But Gmail put all mails received into the Spam folder.

I revised the mail Header and its a SPF softfail causes because my server is not rewritting the sender envelope.

How can I activate SRS on my Plesk or solve this issue?

Thanks!

 

[abdi]

http://kb.odin.com/en/3277

 

[Victor12]

Hi abdi.
Thanks for reply but this doesn't solve my problem. On my Plesk, I created new email address info@mydomain.com and configured to forward all mails received to me@gmail.com. But my Gmail puts all messages into Spam folder.

Thanks again!

 

[jorge ceballos]

Hi,
which email authentication protocols have you activated?
As Abdi suggested, SPF is one, but DomainKeys and/or DKIM and DNSr are always good to consider and activate too.
Use email tools as DNSstuff.com or many others you'll find in the Web which will make your email servers much more reliable.

Regards,

 

[Victor12]

Hi Jorge! Thanks for replying.

I activated all security options but problem persists. More data.

Scenario:
- I have the domain mydomain.com correctly working on my Plesk 12 (Centos 7).
- I created new email address: me@mydomain.com. All about this account works fine. I send mails and obtain SPF pass and DKIM validated.
- I activate the option to forwarding all mails received to me@mydomain.com to iamvictor@gmail.com.

When I access to my iamvictor@gmail.com, All mails forwarded by my server go directly to the Gmail's Spam folder with an SPF softfail.

Take a look at this Example. I send a mail from victorsoyyo@yahoo.es to me@mydomain.com. This mail must be forwarded to iamvictor@gmail.com. This is the result.

Delivered-To: iamvictor@gmail.com
Received: by XX.XX.XX.XX with SMTP id z3csp1341637wjv;
        Mon, 23 Feb 2015 11:14:36 -0800 (PST)
X-Received: by XX.XX.XX.XX with SMTP id l12mr25111104wjr.139.1424718875839;
        Mon, 23 Feb 2015 11:14:35 -0800 (PST)
Return-Path: <victorsoyyo@yahoo.es>
Received: from s1.mydomain.es (s1.mydomain.es. [X.XX.XX.X])
        by mx.google.com with ESMTPS id q8si19303121wiw.106.2015.02.23.11.14.35
        for <iamvictor@gmail.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 23 Feb 2015 11:14:35 -0800 (PST)
Received-SPF: none (google.com: victorsoyyo@yahoo.es does not designate permitted sender hosts) client-ip=X.XX.XX.X;
Authentication-Results: mx.google.com;
       spf=none (google.com: victorsoyyo@yahoo.es does not designate permitted sender hosts) smtp.mail=victorsoyyo@yahoo.es;
       dkim=pass header.i=@yahoo.es;
       dmarc=pass (p=NONE dis=NONE) header.from=yahoo.es
Received: (qmail 16737 invoked by uid 30); 23 Feb 2015 20:14:34 +0100
Delivered-To: mydomain.com-me@mydomain.com
Received: (qmail 16730 invoked from network); 23 Feb 2015 20:14:34 +0100
Received-SPF: none (no valid SPF record)
Received: from nm50-vm0.bullet.mail.ne1.yahoo.com (98.138.121.144)

I don´t know how to fix this.

Please, pay attention about the domain. My domain is mydomain.com but my server name is s1.mydomain.es. Could be this the cause?

Thanks!

 

[UFHH01]

Hi Victor12,

please check your SPF records. As you can see in the eMail, there is NONE configured for your domain ( which has to be done at the nameserver from your DOMAIN - provider and not only over the Plesk Control Panel.

 

[Chris Burgess]

We're observing this also. Situation is as described above.

* Domain example.org is hosted on a Plesk 12.5 server
* Email for user@example.org is configured to forward to example.user@gmail.com
* Domain example.org and example.com both have correctly configured SPF records for their (separate) mail hosting. SPF for example.org includes Plesk server 1.1.1.1, SPF for example.com includes external server 3.3.3.3
* Email is sent from user@example.com to user@example.org
* Plesk forwards this email to example.user@gmail.com
* Plesk does not rewrite the sender origin, so Gmail will evaluate this email as originating from example.com but received from 1.1.1.1

Resulting message headers look like this -

Delivered-To: example.user@gmail.com
Received: by 10.103.169.131 with SMTP id m3csp1252889vsh;
Mon, 20 Feb 2017 01:08:10 -0800 (PST)
X-Received: by 10.28.0.73 with SMTP id 70mr17063793wma.109.1487581690065;
Mon, 20 Feb 2017 01:08:10 -0800 (PST)
Return-Path: <user@example.com>
Received: from example.org (example.org. [1.1.1.1])
by mx.google.com with ESMTPS id k96si2846613wrc.18.2017.02.20.01.08.09
for <example.user@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 20 Feb 2017 01:08:10 -0800 (PST)
Received-SPF: fail (google.com: domain of user@example.com does not designate 1.1.1.1 as permitted sender) client-ip=1.1.1.1;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of user@example.com does not designate 1.1.1.1 as permitted sender) smtp.mailfrom=user@example.com
Received: by example.org (Postfix, from userid 30) id AAEA6B00428; Mon, 20 Feb 2017 10:08:09 +0100 (CET)
X-Original-To: user@example.org
Delivered-To: user@example.org
Received: from smtp.example.com (smtp.example.com [3.3.3.3]) by example.org (Postfix) with ESMTPS id 8FF17B0041D; Mon, 20 Feb 2017 10:08:09 +0100 (CET)
Received: from [3.3.5.7] (helo=mac-01452.example.com) by smtp.example.com with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.84_2) (envelope-from <user@example.com>) id 1cfjx3-0003oE-Aq; Mon, 20 Feb 2017 10:08:09 +0100
Content-Type: multipart/alternative; boundary="Apple-Mail=_21523DBF-FB9D-4B6B-B81D-E65A238390DD"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Subject: Example subject
From: External User <user@example.com>
In-Reply-To: <CAGB-W4hL8cFsN_PXQkCPkbVtn+yBYX9NJfCkoFnAGzGxGV3mqw@mail.gmail.com>
Date: Mon, 20 Feb 2017 10:08:31 +0100
Cc: Another User <another.user@example.org>
Message-Id: <796F77B9-72DD-4110-BCE5-47C96198A6DF@example.com>
References: <CAGB-W4hL8cFsN_PXQkCPkbVtn+yBYX9NJfCkoFnAGzGxGV3mqw@mail.gmail.com>
To: Example User <user@example.org>
X-Mailer: Apple Mail (2.1878.6)
X-Original-Source-IP: 3.3.5.7
X-INED-Tid: 1cfjx3-0003oE-Aq

Is it possible to configure Plesk to autoforward in a way that does not fail SPF in this situation? It seems like Plesk would need to rewrite the message headers to alter the originating email address - but that feels problematic too?

Should example.user@gmail.com just configure their Gmail to retrieve messages from the mailbox user@example.org?

 

[Atramasis]

I have the same problem. Did someone find a solution for it?

My forwarded mails get this in the header (e.g. email from twitter forwarded to outlook.com, my server IP is replaced):
Received-SPF: Fail (protection.outlook.com: domain of bounce.twitter.com does not designate xxx.xxx.xxx.xxx as permitted sender)

 

[UFHH01]

Hi Atramasis,

such described issues ( with GMail - accounts! ) can as well happen, when you forward eMails from for example Twitter => Outlook365 => GMail => Your_Server . The fact is, that most of the time, there has been as well a DMARC - record setup, which "normally" shouldn't interfere with your SPF - record, but with forwarded eMails, GMail is not able to handle the setup as it should.

Pls. read for example: => https://productforums.google.com/forum/#!topic/gmail/fDJ0CbaU9Pw
The only solution I read about, was to remove one of the forwarders, but you might as well consider to contact Google itself, to investigate your issue(s) - the Plesk Community would be happy to read about other solutions/work-arounds as well!

 

[Atramasis]

In my case, there is no Gmail in the chain. It's more like Twitter => My Server => Outlook.com. In Outlook all mails go to junk folder and I think it could be because of SPF fail. Why is it saying "domain of bounce.twitter.com does not designate xxx.xxx.xxx.xxx as permitted sender"? It should by my domain and my IP or Twitter and their IP.

 

[Riemsesy]

This is still a problem.

Plesk forwards the mail with from address from the original sender
Someone@business.com sends you an e-mail on you@yourpleskaccount.com
you have a forward to you@gmail.com
gmail receives the mail and sees from someone@business.com from your plesk server. But your plesk server isn't authorized to send mail from business.com
so gmail ditches the mail

you can't do anything about spf dkim dmarc because you don't manage the example domain business.com

plesk should forward the mail with from address you@yourpleskaccount.com