G Suite dropping Cloudflare emails

Forums › IT Pro and developers › G Suite dropping Cloudflare emails - How to fix

ANglEAUT

altered-ego
2436 posts

Uber Geek
+1 received by user: 842

Trusted

Lifetime subscriber

#270521 13-May-2020 14:59

Hi.

Looking for people using / configuring Cloudflare & G Suite.

My alter ego is using G Suite for email. DNS domains are managed outside of the Google environment. Currently, emails from Cloudflare are simply bounced. Please can somebody tell me where to look to try and fix this.

The bounce message (The IP is either .157 or .158):

May 13, 2020, 11:40 2.33 seconds Bounced
May 13, 2020, 11:40 Received from an SMTP server with IP address: 192.174.87.157 (TLS enabled) 250 2.0.0 OK
May 13, 2020, 11:40 Inserted into Gmail delivery pipeline
May 13, 2020, 11:40 Bounced Message rejected. See https://support.google.com/mail/answer/69585 for more information.

DNS entries

_dmarc = v=DMARC1; p=quarantine; pct=100; rua=mailto:email@fqdn.tld; adkim=r; aspf=r
fqdn. = v=spf1 include:_spf.google.com -all
google._domainkey = v=DKIM1; k=rsa; p=MIIBIjANB....

This is used for personal use only, no 3rd party mail senders such as MailChimp etc are required.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

freitasm

BDFL - Memuneh
80657 posts

Uber Geek
+1 received by user: 41065

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2482828 13-May-2020 15:12

Sorry, not clear - are these email from the Cloudflare service, or emails sent from a domain that has DNS records managed on Cloudflare?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

ANglEAUT

altered-ego
2436 posts

Uber Geek
+1 received by user: 842

Trusted

Lifetime subscriber

#2482889 13-May-2020 16:44

Emails coming from Cloudflare are not arriving in my alter egos mailbox. I am trying to troubleshoot why Google is dropping them.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#2483242 13-May-2020 22:37

Not a well explained problem and the anonymisation makes it awkward.

Looks like you have Cloudflare sending email to Gmail, and the SPF record which is set to hardfail, only allows Google to originate email from your domain.

So Google are refusing the message for SPF failure?

The emails coming from Cloudflare, what's the sender detail (envelope sender and from header) and will Cloudflare actually be allowed to original email from that envelope? Do you need to add an include: for Cloudflare's addresses?

No signature to see here, move along...

freitasm

BDFL - Memuneh
80657 posts

Uber Geek
+1 received by user: 41065

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2483244 13-May-2020 22:39

Thing is... Cloudflare does not have a amtp service so that would suggestion makes no sense. It only proxies inbound, not outbound.

Also the OP said email from Cloudflare (the service) not his servers.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#2483273 13-May-2020 23:24

So emails from Cloudflare (which doesn't offer an SMTP service) must be service notifications or somesuch, right?

Because he quoted SPF settings for his domain, which would be irrelevant unless the emails being sent as service notifications, are using his own domain as their sender detail.

Happily admit I didn't fully understand the problem based on the original post.

No signature to see here, move along...

freitasm

BDFL - Memuneh
80657 posts

Uber Geek
+1 received by user: 41065

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2483364 14-May-2020 08:31

Exactly why I asked what emails are being talked about.

Cloudflare service notifications come from Cloudflare - not the OP's servers.

If it's emails sent from OP's servers to his own Google G Suite account then the DNS configuration would all have to refer to his actual IP address because Cloudflare only proxies inbound connections, not outbound connections.

As the problem is described it sounds like something different in action. Perhaps an stricter set of rules the OP might have previously enabled on his G Suite account?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

HP

Shop now for HP laptops and other devices (affiliate link).

ANglEAUT

altered-ego
2436 posts

Uber Geek
+1 received by user: 842

Trusted

Lifetime subscriber

#2484050 14-May-2020 20:47

Thanks for the feedback so far.

To clarify my question.

Person AE has a Cloudflare account. They want to receive news letters & invoices from Cloudflare the company.
Person AE's G Suite account is for personal use, no specific business requirements, can change any settings if recommended.
Any & all other email arrives at Person AE's inbox.
The email logs in G Suite show that the news letters & invoices from Cloudflare are binned.
- Direction: Received
- Status: 0/1 Delivered
- Result: Bounced
- Error message: Message rejected. See https://support.google.com/mail/answer/69585 for more information.

So, is there anybody here that uses / manages G Suite & receives emails directly from Cloudflare the company? Did you have to do anything special to receive the Cloudflare emails?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

freitasm

BDFL - Memuneh
80657 posts

Uber Geek
+1 received by user: 41065

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2484213 15-May-2020 09:12

Thanks for the clarification. This is definitely not related to Person AE's DNS.

Perhaps manage the Spam settings - controlled from the Dashboard under G Apps | Gmail. The default (shown below) should let Cloudflare pass. If not, add the domain to the whitelist:

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.