MailFixIt

IONOS Mail email configuration guide

IONOS Mail: SPF record for provider sending

The effective SPF policy may not authorize IONOS Mail for the envelope domain used by the message.

Problem description

A provider setup symptom may look like:

SPF record for provider sending after a provider DNS change.

Check the sending domain

What this usually means

The effective SPF policy may not authorize IONOS Mail for the envelope domain used by the message.

Fix it

  1. Inventory IONOS Mail plus websites, CRM tools, and newsletter services that send for the domain. Use the current IONOS authorization mechanism for this product and preserve the other legitimate senders.
  2. Find the envelope MAIL FROM domain in a received header or bounce; do not assume it matches the visible From address.
  3. Locate the one TXT record beginning with v=spf1 at that exact DNS name.
  4. Merge the required provider mechanism into that policy without removing other active senders.
  5. Publish the record, send a new message, and confirm spf=pass for the same domain and sending IP.

Common mistake

Publishing two SPF records causes an evaluation error. Replacing an existing policy without a sender inventory can break mail from another service.

What MailFixIt can check

MailFixIt can find missing, conflicting, or invalid public SPF evidence. It cannot activate IONOS Mail, create a mailbox, or enable private account features.

Use the related guides for the exact DNS or authentication warning and verify the corrected path with a new test.

Frequently asked questions

What does MailFixIt check for IONOS Mail?

It checks the public SPF record and visible conflicts. The provider console and a new message or delivery test are still required.

Should I replace every existing DNS record with the provider values?

No. Confirm the exact record type and owner, preserve unrelated legitimate services, and change only the provider-controlled record required for the intended mail route.

Related email diagnostics

Email delivery delayed or rejected after a DNS migrationDiagnose email that stopped arriving after a DNS change. Compare public MX records with the intended provider and avoid false alarms for mail gateways. SPF is not configured for the envelope sender domainDiagnose SPF missing on a bounce or MAIL FROM subdomain. Check the exact envelope domain, add only authorized senders, and verify safely. DKIM public key record is invalid or revokedDiagnose an invalid or revoked DKIM public key record. Check the exact DKIM selector in public DNS before replacing a sender-provided key.

Primary sources: IONOS Mail official setup guidance.