General DNS / SPF question

[G.W. Haywood]

Hi there,

On Sat, 7 Jan 2023, Michael Muller wrote:

> This is my first time posting here, and I'm not sure if it's the
> right place or not to ask my question. This is a general DNS
> question, specifically, I think, SPF.

Probably not really the right place but the SPF users' list has been a
bit dead for a while so let's see what happens.

> I host email using SmarterMail, and all 400+ customers either use a 
> regular email client (desktop app/mobile device) or the webmail interface.
> 
> One particular customer wants to use Gmail as their email client for
> sending email from their domain.

What's the domain?

> I helped set up the settings at gmail for the SMTP server, and did
> the google-siteverification and added _include:gmail.com_ to the SPF
> TXT record,

The gmail.com SPF record is just a redirect - wasteful.  I'd suggest

include:_spf.google.com

instead.

> as well as DKIM and DMARC configured. I get green lights for the
> domain from Dmarcian (well, they said I had a duplicate SPF value,
> which I have removed).
> 
> The emails that get sent *do* arrive for other users on my email server, 
> but *not* to email addresses off-server, ie; @live.com
> 
> I can see the traffic from gmail in my logs, and it appears the emails 
> are sent, but they do not arrive.
> 
> Stumped. Any spare brain cells available out there would be appreciated.

Can you show us a log of one of the transactions?  Or perhaps get the
customer to try to send mail to me, I should be able to see everything
that's needed in our server logs.

-- 

73,
Ged.