• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue SPF error does not use "SPF explanation text" setting

Benoit_HaiSoft

New Pleskian
Hi,

We are using Plesk Onyx 17.8 (microupdate #50) on CentOS 7, with Postfix.

The setting "SPF explanation text" is configured as the following :
"SPF fail : This server is not allowed to send emails on behalf of this domain. Please contact your administrator."

The SPF check is working correctly, but the reject emails do not contain the "SPF explanation text".
Here is an example of an email that is sent after SPF reject :

----------------------------------------------------------------------------------------------------------------------------------------------
This is the mail system at host vm.domainA.tld.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<[email protected]>: host mail.domainB.tld[IP.ADD.RE.SS] said: 550 5.7.1 Command
rejected (in reply to end of DATA command)


Reporting-MTA: dns; vm.domainA.tld
X-Postfix-Queue-ID: 282795B0A17
X-Postfix-Sender: rfc822; [email protected]
Arrival-Date: Tue, 16 Apr 2019 15:26:05 +0200 (CEST)

Final-Recipient: rfc822; [email protected]
Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.7.1
Remote-MTA: dns; mail.domainB.tld
Diagnostic-Code: smtp; 550 5.7.1 Command rejected
----------------------------------------------------------------------------------------------------------------------------------------------


This seems to be the same problem as this post :
Issue - SPF error does not use configured "explanation text"

We're running Plesk v12.5.30_build1205150826.19 os_CentOS 7 (Update #53) with Postfix as our MTA.

The Mail Server Settings are configured with the following:

SPF explanation text: "Your email was rejected because you are not using a server that is authorized to send mail from your domain. This is a problem with your email configuration. Please contact your email provider to learn how to fix this problem."

SPF checking is working as it should be, however messages that are rejected due to a mismatch get this bounce message:

=================
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain domain.ca by mail.domain.ca. [IP].

The error that the other server returned was:
550 5.7.1 Command rejected
==================

Error log says:

==================
milter-reject: END-OF-MESSAGE from mail-qt0-f169.google.com[209.85.216.169]: 5.7.1 Command rejected;
==================

Both the error log AND the bounce message should be giving a more descriptive error. In the error log I'd expect to see something like "SPF failure" and perhaps an indication of the mismatch that was found.

The bounce message *should* be including my "SPF explanation text:" otherwise what's the point of configuring that value in Plesk??

Please fix this.

-Jordan

Anyone having the same problem ?

Should I report this as a bug ?

Thank you
 
Do you also have greylisting enabled? And if you disable greylisting, do you find that the explanation text is then shown correctly in bounces?

We found that this bug was fixed like Igor reported in that thread, but then when we enabled greylisting, the fix was gone and it reverted to prior behaviour. Which is especially annoying because now you can't tell if a message is bounced for SPF or greylisting...
 
Back
Top