Mail from server is rejected with error: likely unsolicited mail

[johnny09]

Hello.

Cant send to Gmail, round cube mails, bounce back.
Have DNS records on Namecheap, all records rechecked, all ok for DKMI.
Mails to inbox.lv are sent, don't bounce back.
Any suggestions ?

[johnny09]

host gmail-smtp-in.l.google.com[142.251.1.27] said:
    550-5.7.26 This mail has been blocked because the sender is
    unauthenticated. 550-5.7.26 Gmail requires all senders to authenticate with
    either SPF or DKIM. 550-5.7.26  550-5.7.26  Authentication results:
    550-5.7.26  DKIM = did not pass 550-5.7.26  SPF [DOMAIN.ID.LV] with ip:
    [IP.ADDRESS] = did not pass 550-5.7.26  550-5.7.26  For instructions on
    setting up authentication, go to 550 5.7.26
    https://support.google.com/mail/answer/81126#authentication
    z11-20020a2ebe0b000000b002d3087cd0d1si443926ljq.217 - gsmtp (in reply to
    end of DATA command)

[overseer]

Do you have SPF records in place? Valid PTR record (reverse DNS) with your hosting company/ISP?

[johnny09]

Yes, more then 5 years all was working, until few days ago.

[johnny09]

Any help? My mail server is a subdomain, at DKIM & SPF Manager the subdomain is red, I have added manually info, but nothing changes, any info what should I add?

Found this one, similar situation...
https://forum.centos-webpanel.com/index.php?topic=12379.0

I have added:
SUBDOMAIN IN TXT "v=spf1 +a +mx +IP ~all"
default._domainkey.SUBDOMAIN 14400 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3.............

The DKIM is the same for the subdomain as for the domain or each needs a different one? Now I have the same for bout - domain and subdomain

[johnny09]

I get this when sending to check-auth@verifier.port25.com

SPF check:          none
"iprev" check:      pass
DKIM check:         pass
DKIM check:         pass

https://wiki.centos-webpanel.com/resolve-emails-marked-as-spam#:~:text=check%2Dauth%40verifier.port25.com

[overseer]

Google is now all-in on DMARC for delivery to Gmail, so definitely check that.
https://dmarcian.com/yahoo-and-google-dmarc-required/

[johnny09]

No changes...all test green when testing here:
https://dmarcian.com/domain-checker/
https://mxtoolbox.com/SuperTool
https://dmarcly.com/tools/spf-record-checker
https://easydmarc.com/tools/spf-lookup?domain
Also sending mail to auth-results@verifier.port25.com all PASS

I think this one
https://wiki.centos-webpanel.com/to-reduce-the-amount-of-spam-sent-to-gmail

[johnny09]

The only thing is the subdomain that has no records, how to add?

Subdomain:


Domain:


Any help on subdomain?

[johnny09]

Solution...

DNS records
default._domainkey.j
_dmarc.j
= j is subdomain

and an extra MX record, all tests green