Additional SPF validation being added to incoming mail in Jira Cloud

[Dylan]

We’ve made a change to Atlassian’s incoming email processing service for Jira Cloud, including Jira Software and Jira Service Desk Cloud.

Previously, Jira Cloud would only reject email that failed both SPF (Sending Policy Framework) and DKIM validation.

As of today, Jira Cloud will reject any email if the sending domain has SPF configured and their IP address does not match the SPF configuration. As a result, requests, issues, comments, and other items will not be updated. The person sending the email will receive a reply with details about the error.

What do I need to do?
The sender will need to update their SPF settings on their DNS (Domain Name System) SPF record. SPF record settings can be tested using tools like MxToolBox. Alternatively, the sender can change the IP addresses or domain that their emails are sent from.

For questions or support, open a support ticket.

Thanks,

The Jira Cloud team

[Boris Berenberg - Atlas Authority]

What about domains without SPF configured at all?

[Dylan]

Hi @Boris Berenberg - Atlas Authority  - no changes have been made outside SPF and DKIM. Emails sent from domains without an SPF policy configured will continue to be processed.

[Peter Reiser]

@Dylan This change breaks our complete Jira Service Desk model!

Due to the  limitation of Jira Servicedesk only supporting a single email address per Servicedesk  we had to implement this fix.

https://community.atlassian.com/t5/Jira-Service-Desk-questions/Configure-more-than-one-email-channels-in-a-project/qaq-p/690096)

We currently have around 120+ Email addresses which automate the triage of Service Request for 1000' of customers with 100's different Email domains. 

We cannot ask all the individual customers to add and SPF record just to submit a Service Request. 

Do you have any suggestion on how we can fix this ? 

[Peter Reiser]

ok we found a solution

1. Create a support email address in your email domain, e.g. support@domain.com

2. Add this email as JSD support email

3. Create Email alias (e.g add_user@domain.com)  in the same domain and point it to support@domain.com

Since both email addresses are in the same domain SPF,DKIM works 

[Yves Martin]

I are facing issue with Jira Software - Server edition - Mail Handler that rejects incoming email by replying with "user/email not known or permissions lacking" - whereas everything seems correct on that concerns.

But email has been marked with "spf=fail" by our relying SMTP. Would it be a reason for Jira "Server" also to reject mail?