SPF?

Hi there - I authenticated with DKIM and DMARC, and we have a SPF record that exists, “This domain has existing SPF record. Check our guidance before including the required data, as it may affect emails you send from other providers.”.

But for some odd reason I’m still getting an error message: "It says that our domain isn’t fully authenticated. Authentication supports a positive sender reputation.

Anyone have any thoughts on why this is happening?

Hi @JPun,

See this post: https://community.hubspot.com/t5/Blog-Website-Page-Publishing/SPF-Record-failure/m-p/916023#M10844

As @Shabzin was able to do, you should be able to include your additional SPF record with the existing.

Josh

Hi @JPun I suggest running a test with https://www.learndmarc.com/ to verify your email domain configuration.

While HubSpot suggests adding an SPF record, the emails are sent from the hubspotemail.net domain whereas your DNS records are for your domain, which would create a domain mismatch and after much testing it’s not needed.

As @Josh mentioned, you can combine your SPF record with an existing, so if you already have one for google and you want to include one for hubspot, you could combine them into one.

Here is your existing:

v=spf1 include:_spf.-google.com ip4:65.39.142.71 include:spf.mandrillapp.com ~all

and how to combine with HubSpot’s suggestion:

v=spf1 include:_spf.-google.com ip4:65.39.142.71 include:spf.mandrillapp.com include:674097.spf06.hubspotemail.net ~all

With that said, I recommend running the test from all places you send email (Gmail, Mandrill and HubSpot) to see the results and recommendations to update your SPF accordingly.