[slacka]

First of all, if you check this site:

https://toolbox.googleapps.com/apps/checkmx/check?domain=tab...

It is not to be set up correctly.

Now in your case, you failed to mention DMARC records. ALL of the big cloud email services have required that for years. Your SMTP server checklist is straight out of 2005.

This entire thread reminds me of the guy who pulled out of a desk drawer an Analog Startac cell phone and blamed AT&T for it not working. Email has moved on. It not Google's fault that people are configuring SMTP servers like it 2005.

[mirimir]

What does this mean?

> error SPF must allow Google servers to send mail on behalf of your domain.

So you must let Google spoof your domain? That seems crazy.

ProtonMail has the same error:

https://toolbox.googleapps.com/apps/checkmx/check?domain=pro...

[matrixagent]

He's wrong about what this tool provides – namely information for people who want to use GSuite for their email. In that context it makes sense that you have to allow Google "spoofing" your domain, of course. But it has nothing to do with what is being discussed here.

[mirimir]

Ah. Thanks. It makes sense now. I didn't read carefully enough.

[roca]

This tool checks that you have set up your domain correctly for use with Google Apps.

For domains that are not using Google Apps, its results are meaningless.

[zlynx]

It turns out DMARC isn't actually required. Having it might help your acceptance score, but gmail and outlook don't actually require it.

I know because I haven't set up DMARC for my email domain, and my email still gets accepted by everyone.

I believe it helps that I accept on TLS with a valid certificate, and I used Google's postmaster site verification.