Hello,
it seems that the documented spf setting for MX Plan is not sufficient to avoid emails getting blocked by gmail and co.
The documented setting is v=spf1 mx:ovh.com ~all
However I have seen emails sent by a number of different IPs and hosts:
178.32.116.20 mo559.mail-out.ovh.net
178.33.41.174 mo544.mail-out.ovh.net
178.32.97.161 mo544.mail-out.ovh.net
188.165.52.190 mo559.mail-out.ovh.net
87.98.185.215 mo544.mail-out.ovh.net
178.32.116.54 mo559.mail-out.ovh.net
I've opened a ticket because I strongly suspect it's a bug on their end, but I've had no luck convincing them to fix it so far.
Has anyone found a workaround?
Thanks
Hi, Carlo
I'm in the same boat than you and many others, for sure. This happen since the beginning of 2023, but there are spikes on 2022 too. Always are involved exactly the same nodes, so may be there is something wrong in either side, google or ovh.
Multiple changes in my configs to no avail, I'm just tired of searching for advice, so I'm sorry I can't help. The only relevant fact is that all the bounced mails come from South America recipients, which are mails sent from my forum mail address (not self hosted, but an OVH service).
Any thoughts?
Jesus
I would strongly advise to review Google pages - "Help prevent spoofing, phishing, and spam"
https://support.google.com/a/topic/9061731
Without also having configured DKIM I believe your e-mails sent from OVH MX Plan will always end up in SPAM at Google Mail.
Also, check you domain name at MXToolBox
https://mxtoolbox.com/emailhealth/DOMAIN.NAME/
to see if everything is configured correctly.
Today to combat the spam you would need to have the following configured in order to sent e-mails to big providers and not to receive spam (not all are necessary, but advisable):
- https://en.wikipedia.org/wiki/Sender_Policy_Framework SPF - (Sender Policy Framework)
- https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail DKIM - (DomainKeys Identified Mail)
- https://en.wikipedia.org/wiki/DMARC DMARC - (Domain-based Message Authentication, Reporting and Conformance)
- MTA-STS - (Mail Transfer Agent Strict Transport Security)
- TLS-RPT - (TLS Reporting)
- https://en.wikipedia.org/wiki/Brand_Indicators_for_Message_Identification BIMI - (Brand Indicators for Message Identification) if you have a company 
I am not an expert, but have my own MIAB running at home and also use OVH free e-mail 5GB/hosting 100MB with purchase of a domain name.
I have the same problem. I'm just going to find another hosting. Bye OVH.