I am using PMG for outbound email. few days back my customers reported their emails are going into spam with only gmail.com after investigation I find out that the read receipts are sending thru PMG's are from sender email id (gmail.com original email sender). like if received email from client and he asked for read receipt then PMG sending the read receipt from gmail.com to gmail.com email due to this SPF get failed and email got bounced, now later my all emails are going into spam folder.
How can I fix this? did I configure the PMG wrong? am I missing something?
here is the PMG logs.
2025-04-30T23:11:49.989528+05:30 outbound postfix/smtpd[49334]: connect from mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:51.026107+05:30 outbound postfix/smtpd[49334]: Anonymous TLS connection established from mail.mymailserver.com[XXX.XXX.XX.31]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
2025-04-30T23:11:51.876083+05:30 outbound postfix/smtpd[49334]: D5D2C601607: client=mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:52.627253+05:30 outbound postfix/cleanup[49338]: D5D2C601607: message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>
2025-04-30T23:11:52.628723+05:30 outbound postfix/qmgr[24014]: D5D2C601607: from=<sender@gmail.com>, size=1745, nrcpt=2 (queue active)
2025-04-30T23:11:52.728332+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: new mail message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>#012
2025-04-30T23:11:52.900307+05:30 outbound postfix/smtpd[49334]: disconnect from mail.mymailserver.com[XXX.XXX.XX.31] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
2025-04-30T23:11:52.986147+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: SA score=0/5 time=0.237 bayes=0.00 autolearn=no autolearn_force=no hits=BAYES_00(-1.9),FREEMAIL_ENVFROM_END_DIGIT(0.25),FREEMAIL_FROM(0.001),HTML_MESSAGE(0.001),KAM_DMARC_STATUS(0.01),RCVD_IN_DNSWL_BLOCKED(0.001),RCVD_IN_VALIDITY_CERTIFIED_BLOCKED(0.001),RCVD_IN_VALIDITY_RPBL_BLOCKED(0.001),RCVD_IN_VALIDITY_SAFE_BLOCKED(0.001),SPF_HELO_NONE(0.001),SPF_SOFTFAIL(0.665),SPOOFED_FREEMAIL(0.001)
2025-04-30T23:11:52.999136+05:30 outbound postfix/smtpd[49343]: connect from localhost[127.0.0.1]
2025-04-30T23:11:53.000800+05:30 outbound postfix/smtpd[49343]: 00271601627: client=localhost[127.0.0.1], orig_client=mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:53.042762+05:30 outbound postfix/cleanup[49338]: 00271601627: message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>
2025-04-30T23:11:53.044254+05:30 outbound postfix/qmgr[24014]: 00271601627: from=<sender@gmail.com>, size=1945, nrcpt=3 (queue active)
2025-04-30T23:11:53.044544+05:30 outbound postfix/smtpd[49343]: disconnect from localhost[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=2 data=1 commands=6
2025-04-30T23:11:53.044661+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: accept mail to <sender@gmail.com> (00271601627) (rule: default-accept)
2025-04-30T23:11:53.044757+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: accept mail to <report_bounce@pmgserver.com> (00271601627) (rule: default-accept)
2025-04-30T23:11:53.047224+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: processing time: 0.325 seconds (0.237, 0.016, 0)
2025-04-30T23:11:53.047696+05:30 outbound postfix/lmtp[49339]: D5D2C601607: to=<sender@gmail.com>, relay=127.0.0.1[127.0.0.1]:10023, delay=1.5, delays=1/0.05/0.04/0.33, dsn=2.5.0, status=sent (250 2.5.0 OK (60161B681260E0AF893))
2025-04-30T23:11:53.087633+05:30 outbound postfix/lmtp[49339]: D5D2C601607: to=<report_bounce@pmgserver.com>, relay=127.0.0.1[127.0.0.1]:10023, delay=1.5, delays=1/0.05/0.04/0.37, dsn=2.5.0, status=sent (250 2.5.0 OK (60161B681260E0AF893))
2025-04-30T23:11:53.088187+05:30 outbound postfix/qmgr[24014]: D5D2C601607: removed
2025-04-30T23:11:53.204225+05:30 outbound postfix/smtp[49344]: Trusted TLS connection established to gmail-smtp-in.l.google.com[142.251.186.27]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)
2025-04-30T23:11:53.543275+05:30 outbound postfix/smtp[49344]: 00271601627: to=<sender@gmail.com>, relay=gmail-smtp-in.l.google.com[142.251.186.27]:25, delay=0.54, delays=0.04/0.05/0.13/0.31, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[142.251.186.27] said: 550-5.7.26 Your email has been blocked because the sender is unauthenticated. 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM. 550-5.7.26 550-5.7.26 Authentication results: 550-5.7.26 DKIM = did not pass 550-5.7.26 SPF [gmail.com] with ip: [XX.XX.XX.124] = did not pass 550-5.7.26 550-5.7.26 For instructions on setting up authentication, go to 550 5.7.26 https://support.google.com/mail/answer/81126#authentication 5614622812f47-4021282897csi2461189b6e.27 - gsmtp (in reply to end of DATA command))
2025-04-30T23:11:54.608653+05:30 outbound postfix/smtp[49345]: Trusted TLS connection established to inbound.pmgserver.com[XXX.XXX.XX.99]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)
2025-04-30T23:11:56.103520+05:30 outbound postfix/smtp[49345]: 00271601627: to=<report_bounce@pmgserver.com>, relay=inbound.pmgserver.com[XXX.XXX.XX.99]:25, delay=3.1, delays=0.04/0.1/2/0.97, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B440A10003E)
2025-04-30T23:11:56.104004+05:30 outbound postfix/smtp[49345]: 00271601627: to=<report_bounce@pmgserver.com>, relay=inbound.pmgserver.com[XXX.XXX.XX.99]:25, delay=3.1, delays=0.04/0.1/2/0.97, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B440A10003E)
2025-04-30T23:11:56.105066+05:30 outbound postfix/qmgr[24014]: 00271601627: removed
How can I fix this? did I configure the PMG wrong? am I missing something?
here is the PMG logs.
2025-04-30T23:11:49.989528+05:30 outbound postfix/smtpd[49334]: connect from mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:51.026107+05:30 outbound postfix/smtpd[49334]: Anonymous TLS connection established from mail.mymailserver.com[XXX.XXX.XX.31]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
2025-04-30T23:11:51.876083+05:30 outbound postfix/smtpd[49334]: D5D2C601607: client=mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:52.627253+05:30 outbound postfix/cleanup[49338]: D5D2C601607: message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>
2025-04-30T23:11:52.628723+05:30 outbound postfix/qmgr[24014]: D5D2C601607: from=<sender@gmail.com>, size=1745, nrcpt=2 (queue active)
2025-04-30T23:11:52.728332+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: new mail message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>#012
2025-04-30T23:11:52.900307+05:30 outbound postfix/smtpd[49334]: disconnect from mail.mymailserver.com[XXX.XXX.XX.31] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
2025-04-30T23:11:52.986147+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: SA score=0/5 time=0.237 bayes=0.00 autolearn=no autolearn_force=no hits=BAYES_00(-1.9),FREEMAIL_ENVFROM_END_DIGIT(0.25),FREEMAIL_FROM(0.001),HTML_MESSAGE(0.001),KAM_DMARC_STATUS(0.01),RCVD_IN_DNSWL_BLOCKED(0.001),RCVD_IN_VALIDITY_CERTIFIED_BLOCKED(0.001),RCVD_IN_VALIDITY_RPBL_BLOCKED(0.001),RCVD_IN_VALIDITY_SAFE_BLOCKED(0.001),SPF_HELO_NONE(0.001),SPF_SOFTFAIL(0.665),SPOOFED_FREEMAIL(0.001)
2025-04-30T23:11:52.999136+05:30 outbound postfix/smtpd[49343]: connect from localhost[127.0.0.1]
2025-04-30T23:11:53.000800+05:30 outbound postfix/smtpd[49343]: 00271601627: client=localhost[127.0.0.1], orig_client=mail.mymailserver.com[XXX.XXX.XX.31]
2025-04-30T23:11:53.042762+05:30 outbound postfix/cleanup[49338]: 00271601627: message-id=<959843b3c1fa44c593e76b3bbd4d540b@client-domain.com>
2025-04-30T23:11:53.044254+05:30 outbound postfix/qmgr[24014]: 00271601627: from=<sender@gmail.com>, size=1945, nrcpt=3 (queue active)
2025-04-30T23:11:53.044544+05:30 outbound postfix/smtpd[49343]: disconnect from localhost[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=2 data=1 commands=6
2025-04-30T23:11:53.044661+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: accept mail to <sender@gmail.com> (00271601627) (rule: default-accept)
2025-04-30T23:11:53.044757+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: accept mail to <report_bounce@pmgserver.com> (00271601627) (rule: default-accept)
2025-04-30T23:11:53.047224+05:30 outbound pmg-smtp-filter[48159]: 60161B681260E0AF893: processing time: 0.325 seconds (0.237, 0.016, 0)
2025-04-30T23:11:53.047696+05:30 outbound postfix/lmtp[49339]: D5D2C601607: to=<sender@gmail.com>, relay=127.0.0.1[127.0.0.1]:10023, delay=1.5, delays=1/0.05/0.04/0.33, dsn=2.5.0, status=sent (250 2.5.0 OK (60161B681260E0AF893))
2025-04-30T23:11:53.087633+05:30 outbound postfix/lmtp[49339]: D5D2C601607: to=<report_bounce@pmgserver.com>, relay=127.0.0.1[127.0.0.1]:10023, delay=1.5, delays=1/0.05/0.04/0.37, dsn=2.5.0, status=sent (250 2.5.0 OK (60161B681260E0AF893))
2025-04-30T23:11:53.088187+05:30 outbound postfix/qmgr[24014]: D5D2C601607: removed
2025-04-30T23:11:53.204225+05:30 outbound postfix/smtp[49344]: Trusted TLS connection established to gmail-smtp-in.l.google.com[142.251.186.27]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)
2025-04-30T23:11:53.543275+05:30 outbound postfix/smtp[49344]: 00271601627: to=<sender@gmail.com>, relay=gmail-smtp-in.l.google.com[142.251.186.27]:25, delay=0.54, delays=0.04/0.05/0.13/0.31, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[142.251.186.27] said: 550-5.7.26 Your email has been blocked because the sender is unauthenticated. 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM. 550-5.7.26 550-5.7.26 Authentication results: 550-5.7.26 DKIM = did not pass 550-5.7.26 SPF [gmail.com] with ip: [XX.XX.XX.124] = did not pass 550-5.7.26 550-5.7.26 For instructions on setting up authentication, go to 550 5.7.26 https://support.google.com/mail/answer/81126#authentication 5614622812f47-4021282897csi2461189b6e.27 - gsmtp (in reply to end of DATA command))
2025-04-30T23:11:54.608653+05:30 outbound postfix/smtp[49345]: Trusted TLS connection established to inbound.pmgserver.com[XXX.XXX.XX.99]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)
2025-04-30T23:11:56.103520+05:30 outbound postfix/smtp[49345]: 00271601627: to=<report_bounce@pmgserver.com>, relay=inbound.pmgserver.com[XXX.XXX.XX.99]:25, delay=3.1, delays=0.04/0.1/2/0.97, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B440A10003E)
2025-04-30T23:11:56.104004+05:30 outbound postfix/smtp[49345]: 00271601627: to=<report_bounce@pmgserver.com>, relay=inbound.pmgserver.com[XXX.XXX.XX.99]:25, delay=3.1, delays=0.04/0.1/2/0.97, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B440A10003E)
2025-04-30T23:11:56.105066+05:30 outbound postfix/qmgr[24014]: 00271601627: removed