Mail return from Outlook

Question

|| | -------- | Your message to ******@sharafexchange.com couldn't be delivered.

Your message to ******@sharafexchange.com couldn't be delivered.

|| || sharafexchange.com couldn't confirm that your message was sent from a trusted location.

|| || || | -------- | p.victor

|| | -------- | Office 365

|| | -------- | murar

p.victor

|| || Office 365

|| || murar

|| || Action Required

||| ||| Recipient

|| || || | -------- |  

|| | -------- |  

|| | -------- |  

|| | -------- |  

|| | -------- |  

 

|| ||  

|| ||  

|| ||  

|| ||  

|| || SPF validation error

 

|| | -------- | How to Fix It

How to Fix It

|| || Your organization's email admin will have to diagnose and fix your domain's email settings. Please forward this message to your email admin.

---

|| || More Info for Email Admins

|| || Status code: 550 5.7.23 This error occurs when Sender Policy Framework (SPF) validation for the sender's domain fails. If you're the sender's email admin, make sure the SPF records for your domain at your domain registrar are set up correctly. Office 365 supports only one SPF record (a TXT record that defines SPF) for your domain. Include the following domain name: spf.protection.outlook.com. If you have a hybrid configuration (some mailboxes in the cloud, and some mailboxes on premises) or if you're an Exchange Online Protection standalone customer, add the outbound IP address of your on-premises servers to the TXT record. For more information and instructions about configuring SPF records see Customize an SPF record to validate outbound mail sent from your domain and also External Domain Name System records for Office 365.

Answer 1

I checked you DNS records. There is no SPF record. Don't know why I can't see it. Please check with your DNS hosting provider. If you added SPF recently, maybe it's not propagated yet.

Answer 2

Your system admin should check SPF configuration for your domain. Also, check DMARC and DKIM.

More info on this (including troubleshooting): https://learn.microsoft.com/en-us/defender-office-365/email-authentication-spf-configure

Answer 3

domain: blackstoneshipping.com

v=spf1 include:spf.protection.outlook.com include:_spf.mlsend.com -all

Answer 4

The error message you received indicates that your email could not be delivered due to a Sender Policy Framework (SPF) validation error. This typically occurs when the SPF records for your domain are not set up correctly, causing the recipient's mail server to reject your message because it cannot confirm that it was sent from a trusted location.

To resolve this issue, your organization's email administrator will need to check and potentially update the SPF records for your domain. Here are the steps they should follow:

1. Ensure that there is only one SPF record (a TXT record) for your domain at your domain registrar.
2. The SPF record should include the domain name spf.protection.outlook.com.
3. If you have a hybrid configuration (some mailboxes in the cloud and some on-premises), or if you're using Exchange Online Protection standalone, they should also add the outbound IP address of your on-premises servers to the TXT record.

For more detailed instructions on configuring SPF records, refer to the resources provided by Microsoft.