Skip to content

Troubleshoot SPF failures

In Sophos Mailflow, your emails are routed from Microsoft to Sophos and back to Microsoft. With this routing behavior, Microsoft may sometimes fail the SPF check for your emails. To fix this, include Sophos in your SPF record. This way, Microsoft will see Sophos as a permitted sender, and your SPF will work correctly.

To authorize Sophos as a permitted sender, add the Sophos SPF record to your existing record using the include statement:

  • Existing SPF:

    v=spf1 -all

  • Example with include:

    v=spf1 include:_spf.<your region> -all

    To see the SPF domain for your region, see Sophos SPF domains.