Hi @stio, Thanks for reaching out. We have a distinction between marketing related emails and trans

Hi @stio,

Thanks for reaching out. We have a distinction between marketing related emails and transactional emails. The former should be geared towards new product news, announcements, etc and should honor any opt-out settings. The latter provides communication to all active users (including opt outs), and should only be used to provide important information on changes to pricing, changes to how a user may be using a product, or changes to Terms of Service. If this is related to a recent pricing email update, the team wanted to ensure active users were made aware of the potential charges that they may incur in the future.

That being said, please let me know if you’re referring to another email entirely, and I’d be happy to help look into this for you.

RRotaroo Hi @stio, Thanks for reaching out. We have a distinction between marketing rela...

Cyb3r-Jak3•3/2/24, 1:58 PM

If you are an employee then please use /cfrole/cfrole to verify yourself.

Original message was deleted

DarkDeviL•3/3/24, 7:11 AM

I would say nothing less than a such kind of CAPTCHA (or at the bare minimum, manual action) when visiting the link for email routing verifications (and other kind of account verification) can do it.

Both some MUA's as well as spam / content filters or scanners have been seen to "activate" links in various different ways, so if a simple GET, to e.g. https://example.com/verify?email=test%40example.com&token=af68ed27 would be enough, you would sometimes either be verified without doing a single thing, or simply by end up with strange errors.

For example, if that link only works once, then you're eventually getting to the link in your browser, and you'll simply get a "Sorry, something went wrong.Sorry, something went wrong.", even though the verification internally succeeded due to the previous request triggering it, which will cause you confusion and try to re-verify, which quite often will be impossible because the system sees you as already being verified.

DarkDeviL•3/3/24, 7:25 AM

Undocumented behaviour working for years doesn't equal meant to be working that way, nor that it will continue to do so forever?

DarkDeviL•3/3/24, 7:28 AM

Anyway, I'm just making the point that it makes sense to make it tough, in order to avoid eventual "accidental" but automatic verifications, such as for example due to strange ways that some software may work.

! Harmon•3/8/24, 8:54 PM

how do i login to the new email panel?

Shubhadeep•3/10/24, 2:15 AM

I am facing an issue in email routing. Some email from a domain is not forwarded to my destination email which is gmail. And showing result Error. And SPF DMARK DKIM showing none. How to fix this issue. Because the domain sending this email is from bank. Please help

Catt0s•3/10/24, 7:43 PM

Catch-all rule only applies on the zone-level domain, you can’t create catch-all rule for each of your subdomain.

Is this something that just isn't possible or will it come eventually? ie, it would be really nice to be able to regex the catch-all

Uuwinx is there a way to configure DMARC handling? I would like to temporarily disable ...

DarkDeviL•3/11/24, 10:07 PM

Only the domain owner (e.g. sender) can make such configurations, which would be by adjusting their DMARC policy.

Uuwinx also I found this report extremely misleading since I'm deliberately failing DKI...

DarkDeviL•3/11/24, 10:08 PM

The thing you see here, DKIM/SPF passing, but DMARC failing, ... is because the lack of alignment.

Here's an extensive elaboration on DKIM and the alignment: https://community.cloudflare.com/t/dkmi-not-aligned/484140/2

Uuwinx Alright, thank you. So, a `pass` for **DKIM status** merely represents the exist...

DarkDeviL•3/11/24, 10:49 PM

If we can extend that to "the existence of a valid signature, but not necessarily the alignment", - yes.

DarkDeviL•3/11/24, 10:50 PM

There could be for example 10 DKIM signatures on the message, with only one passing, it would still yell "pass", - but not necessarily be having the alignment.

CCatt0s > Catch-all rule only applies on the zone-level domain, you can’t create catch-a...

Catt0s•3/12/24, 1:19 AM

(I really think this woul be good)

Uuwinx I understand that, but isn't it still the receiving end's choice to follow the d...

DarkDeviL•3/12/24, 11:49 AM

It is indeed the receiver's choice who they want use for handling the MX / inbound traffic for their domain(s). So if they're unhappy with the final result of that decision, you're right - they should take advantage of the alternative option, by finding another provider that suits their needs.

DarkDeviL•3/12/24, 11:50 AM

That aside, I do completely understand your point of view as well, - however, we're dealing with a product here where it's main purpose generally is to forward messages.

DarkDeviL•3/12/24, 11:50 AM

You mentioned specifically email worker, - but what exactly are you doing in that email worker?

DarkDeviL•3/12/24, 11:52 AM

When your email routing, or your email worker ends up with the final decision to forward it to example@gmail.comexample@gmail.com, then Gmail will be rejecting due to the DMARC failure, even if Cloudflare didn't initially.

DarkDeviL•3/12/24, 11:54 AM

Microsoft (Outlook/Hotmail/...) previously didn't reject on DMARC failures, - but announced on 2023-03-22, that over the following 30 days, that they would now be doing that as well.

DarkDeviL•3/12/24, 11:55 AM

DMARC was made for domain owners to be able to control what treatment messages that couldn't be verified to be from them would get.

DarkDeviL•3/12/24, 11:55 AM

It wasn't made to be ignored...

DarkDeviL•3/12/24, 11:56 AM

So if you're ending up on passing on the message to another email address (email routing, email worker), there is no point for Clouflare to even try with DMARC failing messages, as they would be rejected later on anyway.

DarkDeviL•3/12/24, 11:59 AM

In fact, Cloudflare would see a reputational dive on those providers, if it just passed everything on, without any sanity checks, which would literally end up on killing #email-routing ...

DarkDeviL•3/12/24, 12:03 PM

Not alone that...

DarkDeviL•3/12/24, 12:03 PM

Preventing scam/phishing/etc...

bckd00r•3/12/24, 5:50 PM

Hey hi, I did mail forwarding on cloudflare, but every time I send an email, I get emails like this via cloudflare. Am I doing something wrong and the emails I send are generally "spam" in my customers' mailboxes. How can I solve this?

rdm•3/12/24, 5:58 PM

If you're testing, test from an address that's different from your endpoint address.

Rrdm If you're testing, test from an address that's different from your endpoint addr...

bckd00r•3/12/24, 6:08 PM

I don't understand? Do I need to send it externally via a 3rd mail? If so, should I use this mail address as a dumping ground and spam notifications will accumulate.

rdm•3/12/24, 6:12 PM

The error message suggests if you're endpoint email address is personal@gmail.com and you're sending tests emails to info@yourdomain... from the endpoint address (personal@gmail.com). You will likely find missing messages because of how google filters

rdm•3/12/24, 6:12 PM

So, if you're testing, test from some address other than what's listed above (that gmail address)

Xandar•3/12/24, 11:04 PM

Hello

Xandar•3/12/24, 11:05 PM

Can Email Routing be used to send emails from the custom domain address as well?

Original message was deleted

Xandar•3/12/24, 11:06 PM

Is there any other free service that allows that then?

Xandar•3/12/24, 11:06 PM

I really need one

naporitan•3/15/24, 5:37 AM

email routing is a very nice service. I use it all the time. Thank you very much.

On 3/14 at 16:00 JST, a number of email forwarding attempts using cloudflare's mail routing were failing.

The rejected reason on the dashboard was something like this. What was the failure?

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

RiskyMH•3/15/24, 12:11 PM

is there a reason email routing is spamming (i only sent one email)

RRiskyMH is there a reason email routing is spamming (i only sent one email)

Isaac McFadyen•3/15/24, 12:12 PM

Because delivery failed, it's retrying delivery.

RiskyMH•3/15/24, 12:12 PM

ah this must be new as it was working well until yesterday

RiskyMH•3/15/24, 12:12 PM

but thanks

RiskyMH•3/15/24, 12:13 PM

ok i think i worked it out, i somehow didnt catch an error with sending webpush

Darrel•3/17/24, 11:36 AM

I havent received an email that I sent. Is there any reason why?

Darrel•3/17/24, 12:04 PM

SPF status
pass
DMARC status
none
DKIM status
none
Rejected reason:
Unknown error: transient error (421): 4.7.0 [104.30.8.137 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 b9-20020a509f09000000b005670de70d89si3472931edf.528 - gsmtp

Why has Gmail blocked my messages? - Gmail Help

Troubleshoot delivery issues with Postmaster Tools Gmail Postmaster Tools provides senders with metrics on parameters such as reputation, spam rate, feedback loop, etc. It can help you prevent your em

rdm•3/17/24, 4:23 PM

You're sayign your email to your email-routing destinations aren't being delivered to google?

WNA•3/18/24, 1:06 PM

Hello

WNA•3/18/24, 1:07 PM

I cant received email

aaronarich•3/20/24, 12:35 PM

Just here to report that I'm also seeing a large spike in email undelivered to Gmail due to Cloudflare IP reputation.

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

Hi @stio, Thanks for reaching out. We have a distinction between marketing related emails and trans

Similar Threads