topic Re: SPF Failure in Email Deliverability

SPF Failure

JGettas — Wed, 09 Nov 2022 16:08:58 GMT

Hi, I have Marketing Hub Enterprise edition and I am having an SPF Fail in all the campaigns I send.

Here I send a print:

My SPF record contains this:

v=spf1 include:2960453.spf08.hubspotemail.net include:bf08x.hubspotemail.net include:mailing.projectcor.com include:_spf.google.com ~all

Any advice?

Re: SPF Failure

kvlschaefer — Wed, 09 Nov 2022 19:50:04 GMT

Hi @JGettas,

Thank you for reaching out!

I wanted to share these two resources on why emails sent through fail SPF alignment and when SPF or DKIM alignment fails.

As a first step, I would recommend checking to see if your DKIM is successfully connected and using this tool to see if there are any SPF errors.

If you find an error, I would recommend connecting with HubSpot Technical Support, as Support is included in your subscription and they will be able to provide real-time assistance for this matter, where you are able to share screenshots and further information about this.

Best,

Kristen

Re: SPF Failure

JGettas — Fri, 11 Nov 2022 12:55:35 GMT

Thanks Kristen! I haven't been able to fix the problem with SPF Eval failure yet.

Re: SPF Failure

kvlschaefer — Tue, 22 Nov 2022 09:47:24 GMT

Hi @JGettas,

Thanks for reaching back out, and apologies for the delayed reply here! Sorry to hear you haven't been able to find a solution to this yet.

I would recommend connecting with HubSpot Technical Support. They wil be able to provide real-time assistance for this matter, where you are able to share screenshots and further information about this.'

Best,

Kristen

Re: SPF Failure

kcorelli — Thu, 29 Feb 2024 15:59:44 GMT

Hello!

Were you ever able to figure out what the cause of the SPF failure was?

We are experiencing the same issue. DMARC passes and DKIM is aligned, but SPF align fails every time.

Would love to hear if you figured this one out!

Re: SPF Failure

CRabeler — Fri, 22 Nov 2024 23:53:07 GMT

I have the same issue. Has anyone been able to resolve the problem with the "envelope from" not matching the "from" in the email (even though all DNS settings are correct with the SPF text record) resulting in SPF failure due to DMARC alignment? The envelope always says hubspotemail.net, not mycompanydomain.com.

Re: SPF Failure

DianaGomez — Mon, 09 Dec 2024 14:05:19 GMT

Hi @CRabeler,

Thanks for reaching out to the Community!

Just to set some context here, what is failing here is SPF alignment, and not SPF authentication (which is what Google/Yahoo requires).

Absolutely understand that this may look concerning, but rest assured that it is actually expected for SPF alignment to fail because of how it works in HubSpot, but there aren't any issues as long as SPF authentication is fine (which seems to be fine in your situation).

The SPF failing is due to checking for 100% SPF alignment between the header From and the envelope From, which is only achievable with a Dedicated IP. You are currently still sending via HubSpot's shared email servers, so adding the SPF policy will add SPF authentication for your email sends via HubSpot.

When using some third-party DNS tools, you may notice a failure for the SPF protocol, which can occur when the from domain matches your domain but you're sending over a shared IP. You can safely ignore this failure if you've correctly set up DKIM and it aligns with your sending domain.

Rest assured that achieving 100% alignment is not necessary (and is even expected to fail for this particular case), and you should not see deliverability issues as a result of this as long as your DKIM is set up properly. You don't need to specifically add any other SPF records just to make it align, nor to ensure alignment.

I hope this helps clarify!

Best,

Diana