[GH-ISSUE #157] Replies to forwarded mails rejected #163

New issue

Closed

opened 2026-03-01 17:45:22 +03:00 by kerem · 1 comment

kerem commented

2026-03-01 17:45:22 +03:00

Owner

Originally created by @Flash1232 on GitHub (May 26, 2021).
Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/157

So I noticed that as of today, I am no longer able to reply to mails sent to my alias on app.anonaddy.com.

Instead, my mail provider would reject my outgoing reply and send me this:

Reporting-MTA: dns; smtpauths.xxxproviderxxx.com [xxx.xxx.xxx.xxx]
Received-From-MTA: dns; [192.168.0.20] [xxx.xxx.xxx.xxx]
Arrival-Date: Wed, 26 May 2021 16:30:00 +0200

Final-recipient: rfc822; blabla+help=domain.io@anonaddy.me
Diagnostic-Code: smtp; 554 5.7.1 Rejected due to potential send/reply spoof attempt, make sure your sending domain has a DMARC policy

Last-attempt-Date: Wed, 26 May 2021 16:34:00 +0200

I tried replying from both my verified default recipient address and some other address.

Any clues?

EDIT: Sorry, I messed up. I was unaware there was only one single free reply for testing and assumed I could still reply. After like the 5th attempted reply mail I got an email stating that the free plan contains no free replies.

Originally created by @Flash1232 on GitHub (May 26, 2021). Original GitHub issue: https://github.com/anonaddy/anonaddy/issues/157 So I noticed that as of today, I am no longer able to reply to mails sent to my alias on app.anonaddy.com. Instead, my mail provider would reject my outgoing reply and send me this: > Reporting-MTA: dns; smtpauths.xxxproviderxxx.com [xxx.xxx.xxx.xxx] > Received-From-MTA: dns; [192.168.0.20] [xxx.xxx.xxx.xxx] > Arrival-Date: Wed, 26 May 2021 16:30:00 +0200 > > > Final-recipient: rfc822; blabla+help=domain.io@anonaddy.me > Diagnostic-Code: smtp; 554 5.7.1 Rejected due to potential send/reply spoof attempt, make sure your sending domain has a DMARC policy > > Last-attempt-Date: Wed, 26 May 2021 16:34:00 +0200 I tried replying from both my verified default recipient address and some other address. Any clues? **EDIT**: Sorry, I messed up. I was unaware there was only one single free reply for testing and assumed I could still reply. After like the 5th attempted reply mail I got an email stating that the free plan contains no free replies.

kerem closed this issue

2026-03-01 17:45:23 +03:00

kerem commented

2026-03-01 17:45:23 +03:00

Author

Owner

@willbrowningme commented on GitHub (May 26, 2021):

Apologies, I was testing new checks specifically for when replying or sending from an alias in order to protect aliases against spoofed sends/replies.

I've just disabled these checks but will be adding them again shortly.

These new checks will only apply to replying or sending from an alias and mean that your recipient email must pass DMARC checks to ensure that it is not a spoofed email.

If your recipient on AnonAddy is using your own domain then please make sure you add a DMARC policy to it along with SPF and DKIM records.

To learn more about DMARC please see this site - https://dmarc.org/.

If your recipient is with a popular mail service provider for example: Gmail, Outlook, Tutanota, Mailbox.org, Protonmail etc. then they will already have a DMARC policy in place so you do not need to take any action.

I've just updated the FAQ to address this - https://anonaddy.com/faq/#im-trying-to-reply-send-from-an-alias-but-it-is-rejected-whats-wrong

@willbrowningme commented on GitHub (May 26, 2021): Apologies, I was testing new checks specifically for when replying or sending from an alias in order to protect aliases against spoofed sends/replies. I've just disabled these checks but will be adding them again shortly. These new checks will only apply to replying or sending from an alias and mean that your recipient email must pass DMARC checks to ensure that it is not a spoofed email. If your recipient on AnonAddy is using your own domain then please make sure you add a DMARC policy to it along with SPF and DKIM records. To learn more about DMARC please see this site - [https://dmarc.org/](https://dmarc.org/). If your recipient is with a popular mail service provider for example: Gmail, Outlook, Tutanota, Mailbox.org, Protonmail etc. then they will already have a DMARC policy in place so you do not need to take any action. I've just updated the FAQ to address this - https://anonaddy.com/faq/#im-trying-to-reply-send-from-an-alias-but-it-is-rejected-whats-wrong

kerem referenced this issue

2026-03-01 17:45:23 +03:00

[GH-ISSUE #163] [Feature request] "E2E" encryption of key user data fields #165

kerem referenced this issue

2026-03-01 17:45:41 +03:00

[GH-ISSUE #222] Some Privacy Queries #204

kerem referenced this issue

2026-03-14 10:22:13 +03:00

[GH-ISSUE #163] [Feature request] "E2E" encryption of key user data fields #727

kerem referenced this issue

2026-03-14 10:31:21 +03:00

[GH-ISSUE #222] Some Privacy Queries #767