Troubleshoot SPF failures
In Sophos Mailflow, your emails are routed from Microsoft to Sophos and back to Microsoft. With this routing behavior, Microsoft may sometimes fail the SPF check for your emails. To fix this, include Sophos in your SPF record. This way, Microsoft will see Sophos as a permitted sender, and your SPF will work correctly.
To authorize Sophos as a permitted sender, add the Sophos SPF record to your existing record using the include
statement:
-
Existing SPF:
v=spf1 include:spf.protection.outlook.com -all
-
Example with
include
:v=spf1 include:spf.protection.outlook.com include:_spf.<your-region>.sophos.com -all
Replace
<your-region>
with the SPF domain for your region. See Sophos SPF domains.