How can unblock sent mail to bytesrl.com

[Cristopher Fasolin]

my team member does not receive a mail to verify our accounts  how can unblock atlassian to sent mail to bytesrl.com domain?

thankyou

[Andy Heinzer]

Hi @Cristopher Fasolin 

Thanks for reporting this.  From looking at the response it appear that the destination mail server doesn't recognize the IP address we used to send that email as being within our SPF records.  I am reaching out to my internal mail team to confirm that our SPF records are setup correctly here.

I'll post back once I know more here.

Andy

[Andy Heinzer]

Hi @Cristopher Fasolin 
The response we saw from your mail server for two different bounces has been:

2023-06-02T00:35:31.000Z	554 ERR - IP 156.70.150.19 DOESN'T MATCH SENDER DOMAIN SPF RECORD
2023-06-01T10:41:53.000Z	554 ERR - IP 156.70.150.17 DOESN'T MATCH SENDER DOMAIN SPF RECORD

From checking with my mail team, the belief here is that your mail server is not correctly validating the SPF record we have for our am.atlassian.com domain.  You can check this IP against the am.atlassian.com domain yourself using a service such as

https://www.spf-record.com/spf-lookup/am.atlassian.com?ip=156.70.150.17

or

https://easydmarc.com/tools/spf-lookup?domain=am.atlassian.com

In both cases there is our SPF for that domain is set to look at the domain of

atlassian.mail.e.sparkpost.com

which has a nested lookup to include

_spf.sparkpostmail.com

Right now when I attempt to resolve the DNS of those IP addresses I get a response such as

% nslookup 156.70.150.17 
Server: 10.104.240.53
Address: 10.104.240.53#53

Non-authoritative answer:
17.150.70.156.in-addr.arpa name = mta-70-150-17.atlassian.com.sparkpostmail.com.

I hope this helps to explain the error as we see it from our side.  I would recommend taking this information to your mail admin so that they can review how this SPF check is being performed.  From our side, we expect that these IP addresses are valid as they are encompassed within a nested SPF record for the sparkpostmail.com address.

I hope this helps.

Andy

[John Funk]

Hi Cristopher - Welcome to the Atlassian Community!

Let me see if someone from Atlassian can take a look since you are on a Free plan.