So if you're ending up on passing on the message to another email address (email routing, email work

So if you're ending up on passing on the message to another email address (email routing, email worker), there is no point for Clouflare to even try with DMARC failing messages, as they would be rejected later on anyway.

DarkDeviLOP•3/12/24, 11:59 AM

In fact, Cloudflare would see a reputational dive on those providers, if it just passed everything on, without any sanity checks, which would literally end up on killing #email-routing ...

DarkDeviLOP•3/12/24, 12:03 PM

Not alone that...

DarkDeviLOP•3/12/24, 12:03 PM

Preventing scam/phishing/etc...

bckd00r•3/12/24, 5:50 PM

Hey hi, I did mail forwarding on cloudflare, but every time I send an email, I get emails like this via cloudflare. Am I doing something wrong and the emails I send are generally "spam" in my customers' mailboxes. How can I solve this?

rdm•3/12/24, 5:58 PM

If you're testing, test from an address that's different from your endpoint address.

Rrdm If you're testing, test from an address that's different from your endpoint addr...

bckd00r•3/12/24, 6:08 PM

I don't understand? Do I need to send it externally via a 3rd mail? If so, should I use this mail address as a dumping ground and spam notifications will accumulate.

rdm•3/12/24, 6:12 PM

The error message suggests if you're endpoint email address is personal@gmail.com and you're sending tests emails to info@yourdomain... from the endpoint address (personal@gmail.com). You will likely find missing messages because of how google filters

rdm•3/12/24, 6:12 PM

So, if you're testing, test from some address other than what's listed above (that gmail address)

Xandar•3/12/24, 11:04 PM

Hello

Xandar•3/12/24, 11:05 PM

Can Email Routing be used to send emails from the custom domain address as well?

Original message was deleted

Xandar•3/12/24, 11:06 PM

Is there any other free service that allows that then?

Xandar•3/12/24, 11:06 PM

I really need one

naporitan•3/15/24, 5:37 AM

email routing is a very nice service. I use it all the time. Thank you very much.

On 3/14 at 16:00 JST, a number of email forwarding attempts using cloudflare's mail routing were failing.

The rejected reason on the dashboard was something like this. What was the failure?

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

RiskyMH•3/15/24, 12:11 PM

is there a reason email routing is spamming (i only sent one email)

RRiskyMH is there a reason email routing is spamming (i only sent one email)

Isaac McFadyen•3/15/24, 12:12 PM

Because delivery failed, it's retrying delivery.

RiskyMH•3/15/24, 12:12 PM

ah this must be new as it was working well until yesterday

RiskyMH•3/15/24, 12:12 PM

but thanks

RiskyMH•3/15/24, 12:13 PM

ok i think i worked it out, i somehow didnt catch an error with sending webpush

Darrel•3/17/24, 11:36 AM

I havent received an email that I sent. Is there any reason why?

Darrel•3/17/24, 12:04 PM

SPF status
pass
DMARC status
none
DKIM status
none
Rejected reason:
Unknown error: transient error (421): 4.7.0 [104.30.8.137 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 b9-20020a509f09000000b005670de70d89si3472931edf.528 - gsmtp

Why has Gmail blocked my messages? - Gmail Help

Troubleshoot delivery issues with Postmaster Tools Gmail Postmaster Tools provides senders with metrics on parameters such as reputation, spam rate, feedback loop, etc. It can help you prevent your em

rdm•3/17/24, 4:23 PM

You're sayign your email to your email-routing destinations aren't being delivered to google?

WNA•3/18/24, 1:06 PM

Hello

WNA•3/18/24, 1:07 PM

I cant received email

aaronarich•3/20/24, 12:35 PM

Just here to report that I'm also seeing a large spike in email undelivered to Gmail due to Cloudflare IP reputation.

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

rdm•3/20/24, 12:48 PM

That support entry talks about your domain reputation, not IP. IP reputation is https://support.google.com/a/answer/27642

Fix email bounces due to blocked IP address - Google Workspace Admi...

Occasionally, you or your users might send mail that bounces because the recipient blocked your IP address. When an IP address is blocked, all mail from the address bounces. Some domains use a de

Rrdm You're sayign your email to your email-routing destinations aren't being deliver...

Darrel•3/21/24, 7:24 AM

Yes. This is for a week now and how can I fix this?

Darrel•3/21/24, 7:24 AM

The response from the remote server was:
421 4.3.0 Upstream error, please check https://developers.cloudflare.com/email-routing/postmaster for possible reasons why. SB7k3doQEjkx

Cloudflare Docs

Postmaster · Cloudflare Email Routing docs

Reference page with postmaster information for professionals, as well as a known limitations section.

Cerv•3/25/24, 9:25 AM

Hello, I am obviously not only one with this problem, but I cant see any easy way how to fix this. Cloudflare keeps to get deny my e-mails with

is4.7.0 suspicious due to the very low reputation of the sending domain.

DDarkDeviL So if you're ending up on passing on the message to another email address (email...

dave•3/26/24, 3:58 PM

There's quite a few use-cases that we already have deployed, that use Email Workers and do not forward the message.

DDarrel SPF status pass DMARC status none DKIM status none Rejected reason: Unknown erro...

dave•3/26/24, 3:59 PM

you should add a DMARC policy, and ideally DKIM too.

Ddave you should add a DMARC policy, and ideally DKIM too.

Darrel•3/26/24, 9:58 PM

What should I put or what's the setup for DMARC policy?

DDarrel What should I put or what's the setup for DMARC policy?

dave•3/26/24, 10:15 PM

depends on how you send emails out normally

Ddave There's quite a few use-cases that we already have deployed, that use Email Work...

DarkDeviLOP•3/26/24, 10:24 PM

And the reason for the "So if [...]So if [...]".

However, any of such other possible solution that does not directly forward the message, would still make the email flow a lot more "insecure", by not rejecting DMARC failures, according to sender's selection of what to do with messages that fail authentication.

DarkDeviLOP•3/26/24, 10:25 PM

If you want to be able to process any messages, regardless of their authentication status, - I'd go as far as to say you would need to roll up your own inbound infrastructure.

Ddave depends on how you send emails out normally

Darrel•3/26/24, 10:28 PM

There are three options in cloudflare for DMARC policy. I already have DMARC added but it's set to None but there's an option for Quarantine and Reject.

I don't have DKIM. I don't understand this and I think I was trying to add this a few days ago but I don't know what to put.

DDarrel SPF status pass DMARC status none DKIM status none Rejected reason: Unknown erro...

DarkDeviLOP•3/26/24, 10:29 PM

The message as you see here, was not DKIM signed at the time that it reached Cloudflare's Email Routing ("DKIM status: none").

As per the Yahoogle! requirements (Google and Yahoo requirements) per 2024-02-01 (February 2024), emails MUST be authenticated.

SPF cannot survive message forwarding, so the only option you have, is to properly DKIM sign your emails (WITH PROPER ALIGNMENT to your own domain), if you expect any deliveries to Yahoo and Google after that date.

Without a such proper DKIM set up from the sender's side, Google will give the message the cold shoulder.

DDarkDeviL The message as you see here, was not DKIM signed at the time that it reached Clo...

Darrel•3/26/24, 10:54 PM

You mean setup DKIM on Cloudflare right? Can you show how to do it?

Darrel•3/26/24, 10:55 PM

There's: Record information
Provide the corresponding information to generate your DKIM record.
Selector
Uniquely identifies a DKIM public key on this domain. ????

Content
Enter the DKIM record content from your email provider.???

DDarrel You mean setup DKIM on Cloudflare right? Can you show how to do it?

DarkDeviLOP•3/26/24, 10:57 PM

As Cloudflare does not operate an outbound email service: No, not at Cloudflare.

DDarkDeviL As Cloudflare does not operate an outbound email service: No, not at Cloudflare.

Darrel•3/26/24, 11:26 PM

Okay so people are now being forced to get a subs right? This is what's going now

DDarrel Okay so people are now being forced to get a subs right? This is what's going no...

DarkDeviLOP•3/26/24, 11:27 PM

Not sure I get the point of what you mean here?

Darrel•3/26/24, 11:27 PM

I really loved how cloudflare works before because we don't need diff email apps to use until this happened.

DDarkDeviL Not sure I get the point of what you mean here?

Darrel•3/26/24, 11:28 PM

Based on what you are saying we have to migrate to diff platforms other than cloudflare right since their email routing isnt working properly now and you said we can't set DKIM

DDarrel Based on what you are saying we have to migrate to diff platforms other than clo...

DarkDeviLOP•3/26/24, 11:28 PM

No, I don't.

DarkDeviLOP•3/26/24, 11:29 PM

Google (Gmail) started to mandate some stricter requirements than what they have been doing before.

DarkDeviLOP•3/26/24, 11:29 PM

The point where you are talking about migrating away from Cloudflare would be wrong.

DarkDeviLOP•3/26/24, 11:29 PM

What you should do, is to migrate away from Google (Gmail) instead.

Darrel•3/26/24, 11:29 PM

Yes, what I only mean is the email not the domain

Unknown error: transient error (421): 4.7.0 [xxx.xxx.xxx.xxx xxx] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support. google.com/mail/answer/188131 m14-20020a17090a2c0e00b0029c6cf7e90dsi263235pjd.20 - gsmtp

Unknown error: transient error (421): 4.7.0 [104.30.8.37 19] Gmail has detected that this message is4.7.0 suspicious due to the very low reputation of the sending domain. To4.7.0 best protect our users from spam, the message has been blocked. For4.7.0 more information, go to4.7.0 https://support.google.com/mail/answer/188131 g191-20020a81a9c8000000b00610b4579248si2814075ywh.311 - gsmtp

So if you're ending up on passing on the message to another email address (email routing, email work

Similar Threads

Similar Threads

Similar Threads