Why am I receiving a PPE Hosted Dispatch mail error

Question

Why am I receiving a PPE Hosted Dispatch mail error

Anonymous

This is the error I receive anytime I try to send an email. This is happening from both my Outlook on my PC and my phone app. Not sure why this started happening in the last 48 hours. Nothing has changed on my PC. I appreciate any help.

This is the PPE Hosted Dispatch mail system.

PPE Hosted tried to deliver your email message,
but was unable to do so for reasons outside our control.

We recommend contacting the person or service responsible for
looking after the recipient domain's email server directly.

The last error message we have available from the recipient's
server is included right below, along with an extract of your
email:

<[email protected]>: host gmail-smtp-in.l.google.com[74.125.138.27] said:
    550-5.7.26 The MAIL FROM domain [] has an SPF record with a
    hard 550-5.7.26 fail policy (-all) but it fails to pass SPF checks with the
    ip: 550-5.7.26 [148.163.129.49]. To best protect our users from spam and
    phishing, 550-5.7.26 the message has been blocked. For instructions on
    setting up 550-5.7.26 authentication, go to 550 5.7.26
    https://support.google.com/mail/answer/81126#authentication
    q19-20020a25f413000000b00dbe9eba9ea6si3586398ybd.497 - gsmtp (in reply to
    end of DATA command)

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Answer 1

This looks like a non-deliverable report from ProofPoint (I think PPE is ProofPoint) letting you know that the recipient (a gmail address) rejected the message.

It mentions SPF, a DNS record hosted by the sending domain that specifies the IP addresses said domain is permitted to send from.

If the IP you are sending from is not on the SPF record for your domain (you can do a quick lookup here - use the domain you sent from and 148.163.129.49) then SPF will fail, and the recipient server may not accept the mail.

This is something that the email admin within your organization should handle, assuming you’re sending from a business email and through a gateway like ProofPoint, as they’ll need to ensure the emails are authenticated properly going forward.

Answer 2

Hello Zach279,

Exactly this is something that the email admin within your organization should handle, Like I said in my first suggestion they need to modify your SPF records so that your domain name can be sent through a third-party email server and the steps I provide can help them.

If you find my suggestion helpful please do not forget to vote it can help the other users who are facing the issue as well. Also if you have any questions regarding the matter, i am still here let me know.

Please feel free to let us know if there are any questions or if we got you wrong. We will continue to assist you based on the information you provide. We sincerely appreciate your patience and cooperation. SincerelyEben Ezer Tres | Microsoft Community Moderator

Answer 3

Anonymous

Hello Spiro P,

I hope you are doing well,

Any update on this issue

We will continue to assist you based on the information you provide. We sincerely appreciate your patience and cooperation. SincerelyEben Ezer Tres | Microsoft Community Moderator

0 comments

Answer 4

Hello Spiro P,

Thank you for your reply,

Please are you using third party emails party emails server, and may i know if you have Microsoft O365 with custom domain name emails. (domain add to Microsoft tenant)

Can you confirm if your current SPF records look like this:

v=spf1 include:spf.protection.outlook.com –all .

If yes! I think you need to modify your SPF records so that your domain name can be sent through a third-party email server.

If you are using the third party to send email (using xxxxxx domain) {correct me if I misunderstood} you should include IP address of the affected company domain; your domain name in the SPF using the include statement ( example : v=spf1 include:mail.server.com ip4: 111.222.333.444 -all ) you can include the IP like that.

For your reference: How Sender Policy Framework (SPF) prevents spoofing - Office 365 | Microsoft Docs

Note that : All sending domains and IPs who will be using that mx gateway (host) will have to add their record in the spf, or else the receiving server will receive a header that the IP is not permitted to send on behalf of that domain.

The format below is right :

v=spf1 ip4: xxx.xxx.xxx.xxx ip4: xxx.xxx.xxx.xxx/24

include: url.domain1.com

include: url.domain2.com

include: microsoft365.default.com ~all

If you are not using Microsoft O365 with custom domain name emails you may follow the Google documentation via the error (bounce back, you received) or contact Google support more information.

Please feel free to let us know if there are any questions or if we got you wrong. We will continue to assist you based on the information you provide. We sincerely appreciate your patience and cooperation. SincerelyEben Ezer Tres | Microsoft Community Moderator