Why Are Some of My Messages Failing Authentication Into Outlook.com?


My email is hosted by Microsoft (Office 365 or Exchange Online Protection) and I have spf.protection.outlook.com in the SPF record for my domain but some mail still fails SPF authentication; how can that be?


Based on the method Microsoft has chosen to implement SPF validation as well as DMARC support for inbound email on Office 365 and Exchange Online Protection, email leaving your organization BUT destined for another O365/EOP customer, you must have your originating server IP address in the domain's SPF record.  It may also be necessary to publish an SPF record for each server to cover bounce (NDN/NDR) messages.


More information is available here:




Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk