Email Message/Sender failed fraud detection - DNS SPF record

  • Andy Crandall
    Asked on December 13, 2016 at 2:44 PM

    We have users receiving in emails generated from jotform the message "This sender failed our fraud detection checks and may not be who they appear to be." Can you tell me what I need to add you our DNS SPF record. Basically jotform is sending email on behalf of our cogentixmedical.com domain and I need to reflect his in our DNS config, etc.

     

     

     

     

     

  • Nik_C
    Replied on December 13, 2016 at 4:45 PM

    Could you please let us know the username where you're experiencing this problem so we can check your account settings?

    Also. you could try setting your own SMTP email, please check the below guides:

    https://www.jotform.com/help/244-How-to-Setup-SMTP-for-a-Form 

    https://www.jotform.com/help/241-How-to-Edit-Delete-Sender-Emails-on-SMTP-Settings 

    Considering that emails from JotForm are legitimate, and are not a spoofed emails, there is nothing to be concerned about.

    We'll wait for your response.

    Thank you!

  • Andy Crandall
    Replied on December 14, 2016 at 8:44 AM
    Hello,
    What mail server ip(s) would this be initiated from . I would need to open a port through our firewall for this. Right now we only allow Microsoft 365/EOP servers access.
    Regards,
    Andy Crandall
    Systems Engineer
    T 952-426-6191 x6191 F 952-426-6191
    5420 Feltl Road, Minnetonka, MN 55343
    [http://emailfiles.uroplasty.com/files/email/CogentixLogo_Emailsignature_RGB.png]
    cogentixmedical.com
    Cogentix Medical is a medical device company forged from the combined experiences of Uroplasty and Vision Sciences. Cogentix Medical is focused on bringing proprietary, innovative technologies to specialty markets.
    ...
  • candy
    Replied on December 14, 2016 at 9:26 AM

    Hello,

    You do not need to enter IP address.

    Could you please enter the following entries into the SPF records?

    include:spf1.jotform.com include:spf2.jotform.com

    Please try. If the issue still persists, let us know.

    Thanks.

  • Andy Crandall
    Replied on December 16, 2016 at 10:44 AM
    Hello,
    I have added the below spf values, the issue still exists. Users still receive the following message from jotform.
    [cid:image001.png@01D25779.392D5FE0]
    Regards,
    Andy Crandall
    Systems Engineer
    T 952-426-6191 x6191 F 952-426-6191
    5420 Feltl Road, Minnetonka, MN 55343
    [http://emailfiles.uroplasty.com/files/email/CogentixLogo_Emailsignature_RGB.png]
    cogentixmedical.com
    Cogentix Medical is a medical device company forged from the combined experiences of Uroplasty and Vision Sciences. Cogentix Medical is focused on bringing proprietary, innovative technologies to specialty markets.
    ...
  • BJoanna
    Replied on December 16, 2016 at 12:15 PM

    Unfortunately your screenshot is not shown here on forum. please note that images that are attached inside of email will not be shown here on forum. You will need to open this thread and upload your screenshot.

    Also based on what I found while I was searching error message you provided, I think that you should add v=spf1 in front of SPF record that my colleague provided:

    v=spf1 include:spf1.jotform.com include:spf2.jotform.com  

    You can also try to add -all at the end:

    v=spf include:spf1.jotform.com include:spf2.jotform.com -all 

  • cogentix
    Replied on December 16, 2016 at 1:30 PM

    I appreciate the feedback. I have attached screenshots of the error message and our dns spf entry.

     

     

    Email Message/Sender failed fraud detection   DNS SPF record Image 1 Screenshot 30Email Message/Sender failed fraud detection   DNS SPF record Image 2 Screenshot 41

     

  • Andy Crandall
    Replied on December 16, 2016 at 1:44 PM
    Hello,
    I appreciate the feedback. I have attached screenshots of the error message and our dns spf entry. I have also updated the message thread on the forum.
    Andy Crandall
    Systems Engineer
    T 952-426-6191 x6191 F 952-426-6191
    5420 Feltl Road, Minnetonka, MN 55343
    [http://emailfiles.uroplasty.com/files/email/CogentixLogo_Emailsignature_RGB.png]
    cogentixmedical.com
    Cogentix Medical is a medical device company forged from the combined experiences of Uroplasty and Vision Sciences. Cogentix Medical is focused on bringing proprietary, innovative technologies to specialty markets.
    ...
  • jonathan
    Replied on December 16, 2016 at 3:07 PM

    Thank you for providing the screenshot image. We were able to view it.

    Email Message/Sender failed fraud detection   DNS SPF record Image 1 Screenshot 20

    You did not clarify if issue was resolve already or not.

    But in case it still not, please check also the SPF limitation option. The issue might be tied to that.

    I suggest reviewing this helpful discussion thread about the same issue.

    https://www.jotform.com/answers/852080-Notification-Email-SPF-feature-that-would-authorize-Jotform-mail-servers-to-send-on-behalf-of-the-domain

    Hope this help. Please let us know if there is more we can assist you with.

     

  • Andy Crandall
    Replied on December 16, 2016 at 3:45 PM
    Issue is not resolved….. I will read the thread (link), etc.
    Andy Crandall
    Systems Engineer
    T 952-426-6191 x6191 F 952-426-6191
    5420 Feltl Road, Minnetonka, MN 55343
    [http://emailfiles.uroplasty.com/files/email/CogentixLogo_Emailsignature_RGB.png]
    cogentixmedical.com
    Cogentix Medical is a medical device company forged from the combined experiences of Uroplasty and Vision Sciences. Cogentix Medical is focused on bringing proprietary, innovative technologies to specialty markets.
    ...
  • jonathan
    Replied on December 16, 2016 at 4:04 PM

    Thank you Andy. Please update us of the results.

    https://www.jotform.com/answers/1010492

     

    Regards