Email to Hotmail (and other MS domains) rejected due to internal routing RRS feed

  • Question

  • We have a system that sends transnational email to customers.  We also have an SPF record that allows all of our outbound mail servers, and ends with ~all (softfail).  We also have proper DKIM and DMARC (with forensic reporting enabled).

    The issue is when we send emails to <someuser>, we get DMARC failure/spam reports from staff [at] stating:

    This is an email abuse report for an email message received from IP on Sun, 14 Feb 2016 07:02:27 -0800.

    The message below did not meet the sending domain's authentication policy.

    For more information about this format please see

    The report included is as follows:

    Feedback-Type: auth-failure
    User-Agent: XMR/2.2
    Version: 1.0
    Original-Mail-From: <webmaster@<domain removed>.com>
    Arrival-Date: Sun, 14 Feb 2016 07:02:27 -0800
    Message-ID: <20160214150202.cf6b8ba0a831@www.<domain removed>.com>
    Authentication-Results:; spf=fail (sender IP is; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=webmaster@<domain removed>.com; dkim=fail (identity alignment result is pass and alignment mode is relaxed) header.d=<domain removed>.com; x-hmca=fail<domain removed>.com
    Auth-Failure: signature
    Reported-Domain: <domain removed>.com
    DKIM-Domain: <domain removed>.com
    DKIM-Identity: @<domain removed>.com
    DKIM-Selector: default

    My question and issue is, why is Microsoft resending our emails internally, changing the sent-from IP and failing the SPF check?

    Going to need someone from MS to address this as it seems to be an internal thing..

    Please see: for more detail.

    • Moved by Richard MuellerMVP Thursday, September 8, 2016 9:44 PM Not a TechNet Wiki question
    Thursday, September 8, 2016 8:25 PM


All replies