- Plesk for Linux
- SPF does not work if SPF TXT record in DNS is too long.
- The following error can be seen in
CONFIG_TEXT: Mar 1 20:08:41 plesk01 spf: Starting the spf filter...
Mar 1 20:08:42 plesk spf: Error code: (26) DNS lookup failure
Mar 1 20:08:42 plesk spf: Failed to query MAIL-FROM: Temporary DNS failure for 'example.com'.
Mar 1 20:08:42 plesk spf: SPF result: tempfail
It is caused by a bug in the product with ID #PPPM-8103 that will be fixed in future Plesk updates.
As a workaround proceed to setup as follows:
- Log into Plesk
- Go to Tools and Settings > Server-Wide Mail Settings
- Enable the option SPF (Only create Received-SPF headers, never block)
- Enable DKIM
- Enable DMARC
Note: This way, DMARC will make decisions relying on SPF and DKIM status and the emails will not be dropped because of SPF problems but SPF status will still be included in DMARC policy check.