PAMHO! AGTSP!
@phani00 @Anantaseshdas
Can you help me review this error? I get it when I try to send an email from ekesvara@despertarespiritual.org to a normal hotmail account.
550 5.7.515 Access denied, sending domain DESPERTARESPIRITUAL.ORG doesn’t meet the required authentication level. The sender’s domain in the 5322.From address doesn’t meet the authentication requirements defined for the sender. To learn how to fix this see: Fix NDR error "550 5.7.515" in Outlook.com - Microsoft Support Spf= Fail , Dkim= Pass , DMARC= Fail [DS0PR12MB6584.namprd12.prod.outlook.com 2026-06-11T12:43:25.399Z 08DEC739BE31111B] [SJ0PR05CA0202.namprd05.prod.outlook.com 2026-06-11T12:43:25.417Z 08DEC5F2AC95DFFE] [SJ5PEPF00000205.namprd05.prod.outlook.com 2026-06-11T12:43:25.426Z 08DEC3B83D457D8F]
Final-Recipient: rfc822; brayan_torres11@hotmail.com
Action: failed
Status: 5.7.0
Remote-MTA: dns; hotmail-com.olc.protection.outlook.com. (52.101.41.55, the
server for the domain hotmail.com.)
Diagnostic-Code: smtp; 550 5.7.515 Access denied, sending domain DESPERTARESPIRITUAL.ORG doesn’t meet the required authentication level. The sender’s domain in the 5322.From address doesn’t meet the authentication requirements defined for the sender. To learn how to fix this see: Fix NDR error "550 5.7.515" in Outlook.com - Microsoft Support Spf= Fail , Dkim= Pass , DMARC= Fail [DS0PR12MB6584.namprd12.prod.outlook.com 2026-06-11T12:43:25.399Z 08DEC739BE31111B] [SJ0PR05CA0202.namprd05.prod.outlook.com 2026-06-11T12:43:25.417Z 08DEC5F2AC95DFFE] [SJ5PEPF00000205.namprd05.prod.outlook.com 2026-06-11T12:43:25.426Z 08DEC3B83D457D8F]
Last-Attempt-Date: Thu, 11 Jun 2026 05:43:25 -0700 (PDT)
depends on how you send email from despertarespiritual.org and how your DNS records are set up. we generally send via sparkpost, which shows you exactly which TXT record you have to add to your DNS so that SPF tests pass.
there’s three commonly used authentication methods:
- SPF, most important. it’s configured via DNS TXT records. you’ll find a general description in wikipedia. as mentioned, sending via sparkpost takes care of this;
- DKIM is a little more complicated to set up. there’s openDKIM on linux that generates encrypted keys which are provided via postfix to the emails you send. that’s also taken care of by sparkpost, and probably whichever other email sending mechanism you use;
- DMARC is the most complicated to set up and maintain because you’ll have to collect reports other mail providers about emails sent out by your domain and analyze them;
i can’t easily check your mail setup because the admin interface is in spanish and i’m too lazy to run everything thru google-translate. but i doubt you send directly via your linux server. whichever email provider you use needs to be configured for SPF and DKIM, at least. to get mail accepted by the big players like google and hotmail.
In this case, I am sending from Gmail Google workspace. Since we have this domain in the iskcon online account. It’s managed form there
but the SPF record is managed from wherever your domain name entry for despertarespiritual.org is configured. there’s an A and probably a C record for that, there has to be a TXT record for SPF. what exactly that has to say depends on your google workspace config.
here i have a TXT record for iskcononline.com configured for google workspace:
record name: mail.iskcononline.com
record value: “v=spf1 mx a:mail.iskcononline.com a:iskcononline.com include:_spf.google.com ~all”
you could probably replace “iskcononline.com” with “despertarespritual.org” and get this working.
[edit: this is a record of type TXT, not A or C, which is more common. how exactly you add such a TXT record depends on whatever interface is dealing with your DNS config.]
Thank you, Prabhu.
The thing is I don’t have access to edit this. I think @Anantaseshdas or @Pancharatna.das have this access.
SORRY, my bad! i am managing the DNS for despertarespiritual.org via the AWS server’s “route53” interface! i didn’t remember that i put those records in place!
i don’t see an entry for SPF, while there is one for DKIM – which corresponds to the error messages you sent. DKIM is working, via google spaces, but SPF isn’t.
i’m going to add the SPF entry i mentioned earlier now. somehow that has been forgotten to be mentioned to me when i got the list of entries to add.
sorry again!
1 Like
added the record. after a couple hours to propagate SPF should be working for your domain.
please let me know if it does!
1 Like
@ekesvarakrishnadas prabhu, did you check again if email gets accepted by hotmail now? or do they still produce the same error?
@phani00 PAMHO!
I just tried to send email to hotmail and got this error. I think it is still the same.
550 5.7.515 Access denied, sending domain DESPERTARESPIRITUAL.ORG doesn’t meet the required authentication level. The sender’s domain in the 5322.From address doesn’t meet the authentication requirements defined for the sender. To learn how to fix this see: Fix NDR error "550 5.7.515" in Outlook.com - Microsoft Support Spf= Fail , Dkim= Pass , DMARC= Fail [PH7PR12MB7332.namprd12.prod.outlook.com 2026-06-13T11:13:54.749Z 08DEC84A177D2A4E] [PH7P220CA0030.NAMP220.PROD.OUTLOOK.COM 2026-06-13T11:13:54.753Z 08DEC8E4F6AC4350] [CY4PEPF0000EE3E.namprd03.prod.outlook.com 2026-06-13T11:13:54.770Z 08DEC6D4BFF12782]
Final-Recipient: rfc822; brayan_torres11@hotmail.com
Action: failed
Status: 5.7.0
Remote-MTA: dns; hotmail-com.olc.protection.outlook.com. (52.101.40.7, the
server for the domain hotmail.com.)
Diagnostic-Code: smtp; 550 5.7.515 Access denied, sending domain DESPERTARESPIRITUAL.ORG doesn’t meet the required authentication level. The sender’s domain in the 5322.From address doesn’t meet the authentication requirements defined for the sender. To learn how to fix this see: Fix NDR error "550 5.7.515" in Outlook.com - Microsoft Support Spf= Fail , Dkim= Pass , DMARC= Fail [PH7PR12MB7332.namprd12.prod.outlook.com 2026-06-13T11:13:54.749Z 08DEC84A177D2A4E] [PH7P220CA0030.NAMP220.PROD.OUTLOOK.COM 2026-06-13T11:13:54.753Z 08DEC8E4F6AC4350] [CY4PEPF0000EE3E.namprd03.prod.outlook.com 2026-06-13T11:13:54.770Z 08DEC6D4BFF12782]
Last-Attempt-Date: Sat, 13 Jun 2026 04:13:54 -0700 (PDT)
@Anantaseshdas & @Pancharatna.das prabhus,
some time ago you must have sent me a list with what DNS entries to add for the despertare website. i don’t remember that message and can’t find it now, but that’s how we always set up domains registered with your google workspace.
these DNS settings usually contain an entry for SPF verification. i took over such an entry from another domain, iskcononline.com, and there’s no problems with that one.
can you please look up the google-workspace instructions re. DNS entries again and send me all of them?
i just sent an email to myself via fluentSMTP plugin and all 3, SPF, DKIM & DMARC are working:
Original Message
how did you send the email to hotmail with failed SPF ?
fluentSMTP is set up to send via AWS SES. you must have sent the email to hotmail from the server directly…or something. because sending directly from the server shouldn’t even work. i’m a bit puzzled…