Having Trouble with 553-SPF domain authentication fail

Question

_{Monday, May 15, 2017 4:18 PM}

Nearly all of our email communications are working, but recently we starting having trouble sending to one particular domain, which is giving us a 553-SPF domain authentication 553 fail error message. We have a SPF record set up, and it seems to have been working for the last year or two. I noticed when looking at the headers both from the failing message and from emails over the last 2 years, that the from address is our internal .local account, and uses FE80 (local) IPv6 addressing. I attempted to add two AAAA DNS records with that internal IPv6 address, which I think I shouldn't do. But it didn't help. Here is the rejection message:

Generating server: CU2.citizensunited1.local

K******@fec.gov
server-9.tower-130.messagelabs.com #553-SPF (Sender Policy Framework) domain authentication 553-fail. Refer to the Troubleshooting page at 553-http:// www.symanteccloud.com/troubleshooting for more 553 information. (#5.7.1) ##<o:p></o:p>

Original message headers:<o:p></o:p>

Received: from CU2.citizensunited1.local ([fe80::25d4:46b:835a:a28d]) by<o:p></o:p>

 CU2.citizensunited1.local ([fe80::25d4:46b:835a:a28d%16]) with mapi id<o:p></o:p>

 14.01.0438.000; Mon, 15 May 2017 11:06:30 -0400<o:p></o:p>

From: **USER** <**USER**@citizensunited.org><o:p></o:p>

To: "K***@fec.gov" <K***@fec.gov><o:p></o:p>

Subject: RE: ADR 823<o:p></o:p>

Thread-Topic: ADR 823<o:p></o:p>

Thread-Index: AdLKfbtfvUH26wSWQauBm3D5dBKjTgA0TKLgAI9oE9A=<o:p></o:p>

Date: Mon, 15 May 2017 15:06:29 +0000<o:p></o:p>

Message-ID: <0916BA89C2947846B222CEE92E9BE287019F57ECC0@CU2.citizensunited1.local><o:p></o:p>

References: <BN6PR09MB1188CC462E118DD79CAA4321D2ED0@BN6PR09MB1188.namprd09.prod.outlook.com><o:p></o:p>

All replies (2)

_{Thursday, May 25, 2017 4:24 AM}

Hi,
Referring to the similar thread as blow, you need to have an SPF record in your public DNS that specifies the public IP address of your server to show it's allowed to send for your domain (not all receiving mail systems do SPF check)
Having Trouble with 553-SPF domain authentication fail
https://www.experts-exchange.com/questions/28162852/E-mail-bounce-back-553-Sender-Policy-Framework-SPF-fail-in-reply-to-RCPT-TO-command.html
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards, 
Wendy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]. 

_{Monday, May 29, 2017 11:32 AM}

Hi,

I am checking how the issue is going, if you still have any questions, please feel free to contact us.

And if the replies as above are helpful, we would appreciate you to mark them as answers, and if you resolve it using your own solution, please share your experience and solution here. It will be greatly helpful to others who have the same question.

Appreciate for your feedback.
Best regards,

Wendy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].