Hallo,

ich betreibe meinen eigenen SMTP der Mails via securesmtp Relay ausliefert. Seit kurzem werden diese aber von Gmail abgewiesen:

host gmail-smtp-in.l.google.com[74.125.133.27] said:
    550-5.7.26 This message does not pass authentication checks (SPF and DKIM
    both 550-5.7.26 do not pass). SPF check for [MEINE_DOMAIN.no-ip.com] does not
    pass with 550-5.7.26 ip: [194.25.134.20].

obwohl ich einen SPF Record erstellt habe:

SPF record for MEINE_DOMAIN.no-ip.com

An authoritative DNS server (ns3.no-ip.com.) responded with these DNS records when we queried it for the domain monheim.no-ip.com.

This record is valid for 5m.

1. pass if the email sender's IP is in the A or AAAA records of MEINE_DOMAIN.no-ip.com.
   a
2. Or else, pass if the email sender's IP is in the MX records of MEINE_DOMAIN.no-ip.com.
   mx
3. Or else, pass if a reverse lookup of the email sender's IP resolves to MEINE_DOMAIN.no-ip.com.
   ptr
4. Or else, pass if the email sender's IP is between 192.168.100.0 and 192.168.100.255.
   ip4:192.168.100.0/24
5. Or else, include the SPF record at t-online.de and pass if it matches the sender's IP.
   include:t-online.de
6. Or else, mark the email as fail.
   -all
   
   Die Header im Ausgang:
   

   Received: from fwd79.dcpf.telekom.de (fwd79.aul.t-online.de [10.223.144.105]) by mailout08.t-online.de (Postfix) with SMTP id F2E252951 for <EMPFÄNGER@gmail.com>; Fri, 9 Dec 2022 11:35:20 +0100 (CET)

   Received: from HOST_PRIVATE.DOMAIN.LOCAL ([217.233.50.84]) by fwd79.t-online.de with (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384 encrypted) esmtp id 1p3aiu-3fjnIP0; Fri, 9 Dec 2022 11:35:20 +0100

   Received: from [127.0.0.1] (CLIENT_PRIVATE.DOMAIN.LOCAL [192.168.100.100]) by HOST_PRIVATE.DOMAIN.LOCAL (8.14.7/8.14.4) with ESMTP id 2B9AZJQP020520 for <EMPFÄNGER@gmail.com>; Fri, 9 Dec 2022 11:35:19 +0100

   
   
   
   Wie muss ein korrekter SPF aussehen damit dieses Setup funktioniert?