Skip Navigation
Expand
TAG being applied due to SPF errors
Answer ID 6834   |   Last Review Date 12/12/2018

Why are most of our emails being flagged with TAG even though we have disabled tagging in the Barracuda spam filter?

Environment:

Incoming email, spam, SPF, Barracuda spam filtering

Resolution:

If the message header contains the following highlighted text, the message is tagged by our spam filters for SPF concerns.

Received-SPF: fail (rightnowtech.com: domain of does not designate as permitted sender)
X-ASG-Tag: SPF
X-Virus-Scanned: by bsmtpd at rightnowtech.com
X-Barracuda-BRTS-Status: 1
X-ASG-Tag: SPF ()
X-Barracuda-Spam-Score: 0.17
X-Barracuda-Spam-Status: No, SCORE=0.17 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=8.0 KILL_LEVEL=9.0 tests=BSF_SPF_HARDFAIL, HTML_IMAGE_RATIO_04, HTML_MESSAGE
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.8189
    Rule breakdown below
    pts rule name              description
    ---- ---------------------- --------------------------------------------------
    0.17 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image area
    0.00 HTML_MESSAGE          BODY: HTML included in message
    0.00 BSF_SPF_HARDFAIL      Custom Rule SPF Hardfail
X-Barracuda-Spam-Flag: YES

To view message headers in an incident created from incoming mail, refer to answer ID 1595: Including email headers for incidents created from email.

Carefully inspect the incoming message and the header to ensure that the incoming message is not spam..

If the error message added to the email header contains IP addresses of servers that are in your control, you should add SPF records to the domain listed.  Oracle B2C Service Technical Support cannot assist in this remedy.  Work with your IT team or the administrators of the domain listed.

For additional information regarding SPF and Sender ID considerations, refer to Answer ID 2489: SPF and Sender ID considerations with Oracle B2C Service sites

Please note that disabling tagging in the Barracuda spam filters will not remove the TAGs from incoming mail. This is a custom rule not controlled by the settings available to our customers.

Cause:

Our Cloud Operations team added a global rule that adds TAG to messages that fail SPF check versus blocking those messages.

Available Languages for this Answer:

Notify Me
The page will refresh upon submission. Any pending input will be lost.