Systematic SPF alignment issues with Zoho subdomains

Systematic SPF alignment issues with Zoho subdomains

Analysis Period: August 19 - September 1, 2025
PROBLEM SUMMARY

Multiple Zoho services are causing systematic SPF authentication failures in DMARC reports from major email providers (Google, Microsoft, Zoho). While emails are successfully delivered due to DKIM authentication, the persistent SPF failures may negatively impact sender reputation over time.

TECHNICAL EVIDENCE

Affected Zoho Subdomains:
1. user.zohobookings.com - 8+ SPF failures across multiple reports
2. notifications.zohoflow.com - 52+ SPF failures (highest volume)
3. public.zohoforms.com - 3+ SPF failures  
4. desk-mailer.zohodesk.com - 1+ SPF failure

Provider Confirmation:
- Google Gmail: 15+ DMARC reports showing SPF fail for these domains
- Microsoft Outlook: 3+ DMARC reports confirming same issue
- Zoho Mail: 4+ DMARC reports showing identical pattern

Sample DMARC Record:
```xml
<policy_evaluated>
  <disposition>none</disposition>
  <dkim>pass</dkim>
  <spf>fail</spf>
</policy_evaluated>
<auth_results>
  <dkim>
    <domain>XXXX.com</domain>
    <result>pass</result>
  </dkim>
  <spf>
    <domain>notifications.zohoflow.com</domain>
    <result>pass</result>
  </spf>
</auth_results>
```

**Analysis**: SPF passes for the Zoho subdomain but fails for domain alignment because `notifications.zohoflow.com` is not included in our SPF record for `DOMAIN XXX.com`.

## CRITICAL IPv6 ISSUE

IPv6 Range: `2600:1901:101::/48`  
Problem: Complete DKIM + SPF failure (not just alignment)  
Affected IPs: `::9`, `::15`, `::17`  
Impact: 6+ emails with total authentication failure

This represents a more serious configuration issue requiring immediate attention.

## CURRENT SPF RECORD

```
v=spf1 ip4:SERVERIP +a +mx include:_spf.google.com include:one.zoho.com ~all
```

**Issue**: `include:one.zoho.com` does not cover the subdomains listed above, which have independent SPF records that don't align with customer domains.

## ROOT CAUSE ANALYSIS

Architectural Problem: Zoho services use fragmented SPF architecture where:
- Customer includes `one.zoho.com` in SPF record
- Individual services use separate subdomains with independent SPF records
- No inheritance or redirect mechanism from parent to subdomains
- Results in SPF alignment failure for DMARC evaluation

## EMAIL DELIVERY CONFIRMATION

Emails are being successfully delivered. Example from Gmail logs:
- **Source IP**: 135.84.80.23
- **Status**: Successfully delivered to zoho-flow@DOMAIN.com
- **Authentication**: DKIM pass (prevents quarantine despite SPF fail)

## REQUESTED RESOLUTION

### Option 1 (Preferred): Zoho Infrastructure Fix
Update Zoho subdomain SPF records to include proper redirects or ensure `include:one.zoho.com` covers all service subdomains.

### Option 2: Customer Workaround Documentation  
Provide official list of all Zoho subdomains requiring SPF inclusion, with guidance on SPF flattening to avoid DNS lookup limits.

### Option 3: IPv6 Immediate Fix
Resolve complete authentication failures for IPv6 range `2600:1901:101::/48`.

## BUSINESS IMPACT

- Current: Functional email delivery with SPF failure noise in DMARC reports
- Future Risk: Potential sender reputation degradation with major providers
- Scope: Affects all customers using multiple Zoho services with DMARC monitoring

## SUPPORTING EVIDENCE

I have comprehensive DMARC reports from 20+ daily reports over 3 weeks showing consistent pattern across Google, Microsoft, and Zoho infrastructure. Available upon request for detailed technical analysis.

---

**Expected Resolution**: Technical clarification on proper SPF configuration OR infrastructure fix for subdomain alignment  
**Timeline**: Non-urgent but ongoing reputation concern requiring architectural solution
    • Sticky Posts

    • How to Add Users to your Organization in ZohoMail?

      A better clarity so you can create other users to start using Zoho Mail. You can directly Add Users from the Control Panel to your Organization. You can invite users with the existing email address. If the person (user) already uses ZohoCRM, then you can import users from Zoho CRM. You can also import them using a .csv file. (if you are planning to add them in Bulk)  In this topic, We will be discussing on how to Add and Invite users only.  The Import options are self explanatory. ____________________________________________________________________________________________________________
    • Recent Topics

    • Multi-Select Field Option Limit Inquiry

      Hello FSM Team, We would like to inquire about the limitation of the Multi-Select field in Zoho FSM. Currently, the system allows a maximum of 10 selectable options, and we encountered the message: “Option count more than allowed count of 10.” Issue:
    • Disable Zoho Contacts

      We don't want to use this app... How can we disable it?
    • Records Per Page

      Can we get max number of records per page increased from 100 to 250 and 500 please? Or alternatively allow us to use the Zoho Sheet View for all records and not just the max 100 showing on the page? thanks.
    • Zoho Forms sheet prefil

      I've been using zoho sheet prefill for a week and it was working perfectly, as soon as i deleted the particular sheet and replaced it with another one no matter what I do it cant find the record and i get this message. Could you please assist me to resolve
    • Check out in Meetings

      Why there is no check out in Meetings of Zoho CRM, very difficult to track
    • WO Completion Status Not Updating Automatically

      Hello Latha, Hope you are doing well. Over the past few days, we have been facing an issue with WO completion. When an AP is marked as complete, the work order status is not automatically updating to “Completed,” and we have to mark it manually. Could
    • CRM to Desk Contact Sync Issues?

      Hello, I noticed none of the contact changes in CRM are being transferred over to Desk. Anyone else experiencing this? I checked the sync history in desk and it confirms it - it doesn't show "X Contacts Synced" like it normally does.
    • Microsoft Teams integration in Zoho Apptics

      Good app monitoring is not just about collecting data. It is about making sure important updates reach the team in time to act on them. When an app crashes or a user shares feedback from within the app, teams should be able to see it promptly without
    • Able to change project on timelog entries

      Ability to move the timesheet entry from one project to another. When a user adds a wrong entry a manager can change/update the timesheet entry to the correct project.
    • Marketing Tip #28: Increase buyer confidence with visible social media links

      Your social media pages are often where customers go to “double-check” your brand before buying. When visitors can easily find your Instagram, Facebook, YouTube, or LinkedIn from your store, it builds trust and makes your business feel more real and active.
    • [Webinar] Solving business challenges: One tool for documents, forms, PDFs, e-signatures, and more

      Hi Zoho Writer users, Most businesses rely on multiple tools, such as a word processor, form builder, e-signature provider, and PDF editor, for their document workflows. Managing multiple subscriptions, switching between tools, and moving data across
    • Customer Message Edit/Delete Function & Backend Visibility Inquiry

      目前客服已发送的对话支持编辑和删除功能,请问在 Zoho 系统后台,是否可以查看客服具体发送了什么内容,以及删除或修改了哪些信息?如果无法查看,这个功能是否可以通过设置关闭客服的编辑和删除权限?如可以,请告知具体设置路径。 Currently, customer service agents are able to edit and delete messages after sending them. In the Zoho system backend, is it possible to view
    • Google Drive API 403 PERMISSION_DENIED from Deluge custom function - OAuth connection not recognised

      Hi all, I've built a custom Deluge function to route Zoho CRM Account attachments into specific Google Drive subfolders based on filename prefix. The CRM API steps all work correctly, however our first Google Drive API call (listing subfolders via drive/v3/files)
    • Supercharge Your Zoho Billing Workflows with AI Using Zoho MCP

      What is MCP and how does it connect to Zoho Billing? If you've ever wished you could just tell your billing software what to do without clicking through menus, running reports manually, or switching tabs every five minutes, that's exactly what the Zoho
    • Automation Series: Notify Admin When User Accepts an Invitation

      In Zoho Projects, a portal is an organisational-level workspace where user can manage multiple projects. To join a portal, a user will have to accept the portal invitation. However, it is important for admins to be in the loop when a user accepts the
    • Knowledgebase SEO

      We have a custom-domain mapped help center that is not restricted via login. I have some questions: a) will a robots.txt file still allow us to control indexing? b) do we have the ability to edit the sitemap? c) do category URLs get indexed by search
    • Mail Merge preview won't load

      Hello! One of our users has not been able to use mail merge templates in CRM as the preview screen does not load. We have many templates for one of our custom modules and the users are used to this feature and have been using it for years without any
    • mask Customer phone number and agents cant see customer phone number

      Is there any way we can integrate Zoom Phone with Zoho CRM while ensuring that customer phone numbers remain masked? We need a solution where agents can make outbound calls but cannot see customer phone numbers. Please let us know if there is any solution
    • Issue with Zoho Sheets

      Edit: Small Error of Opening doc and losing entire formatting while downloading to *.xlsx format. Also my formulas don't work while opening a document downloaded from Zoho sheets, since the colors aren't matched to the correct data. Even though the data
    • Record-Level Cliq Conversations Inside Zoho CRM

      It would be extremely useful to bring the Zoho Projects + Cliq conversation experience into Zoho CRM records. Today, in Zoho Projects, each project or task can have its own related chat conversation through Cliq, allowing team members to discuss that
    • Introducing note actions and dynamic visibility in Kiosk Studio

      Hello all, We are introducing enhancements to Kiosk Studio that will improve the product scope and meet your custom needs more precisely. What's new? Add notes as Actions: You can add notes to CRM records as kiosk Actions, as well as insert merge fields
    • Logging Calls not working

      For some reason, logging calls is not working anymore. Description of problem: On a Lead's record, in the "Open Activities" block, clicked on "Add New" Clicked on "Call", clicked on "Log a call" Nothing happens. If I click on "Schedule a call" nothings
    • How do I filter contacts by account parameters?

      Need to filter a contact view according to account parameter, eg account type. Without this filter users are overwhelmed with irrelevant contacts. Workaround is to create a custom 'Contact Type' field but this unbearable duplicity as the information already
    • Data Import into Zoho Forms

      Hi everyone, I am migrating several Google Forms into Zoho Forms. I can recreate the forms, but I also need to bring over historical response data currently stored in Google Sheets. I want to keep using that data inside Zoho for analysis, reporting, and
    • How Can I Clear Deleted Members and Free Up Their Storage?

      Can we remove these deleted members and free up their storage?
    • Cliq iOS can't see shared screen

      Hello, I had this morning a video call with a colleague. She is using Cliq Desktop MacOS and wanted to share her screen with me. I'm on iPad. I noticed, while she shared her screen, I could only see her video, but not the shared screen... Does Cliq iOS is able to display shared screen, or is it somewhere else to be found ? Regards
    • Pro rata holiday allowance for variable part time employees

      We have some part time staff who work variable hours and their holiday allowance is based on pro rata system. In Zoho people is there any way to calculate their holiday allowance based on actual hours worked? I.e. worker is entitled to a pro-rata amount of 5.6 weeks holiday, which is equivalent to 12.07% of hours worked over a year. So part time staff's holiday is accrued at a rate of 12.07% per hour worked. Thanks
    • Zoho Bookings - Provide Appointment System ID in Zoho Flow Variable

      Hi Bookings Team, It would be great if you could provide the system record ID for appointments as a variable in Zoho Flow trigger outputs and Fetch Appointments action. This would allow us to create a dymanic URL which can be clicked by a staff user to
    • Understanding tasks

      So we have a module linked to contacts called Equipment and that in turn has a related module called service calls. Often on a service call we want add a task but we are not able. I think it needs a link to the contact. WE therefore tried to add tasks
    • How to transfer files from Creator file upload fields to CRM file upload fields

      This article describes how to transfer files from Zoho Creator file upload fields to Zoho CRM file upload fields. I'm posting it here because the current documentation does not fully and accurately describe how to do this with certain file types (PDF,
    • Add Comprehensive Accessibility Features to Zoho Writer

      Hello Zoho Writer Team, We hope you are doing well. We would like to submit a feature request to enhance Zoho Writer with a full set of accessibility tools, similar to the accessibility options already available in the Zoho Desk agent interface. 🚧 Current
    • ¿Puedo migrar mi sitio desde WordPress a Zoho? ¿Zoho admite herramientas con código personalizado?

      ¡Hola comunidad! Estoy evaluando la posibilidad de migrar mi sitio web https://calculadoradenotas.cl/ desde WordPress a una solución Zoho, y tengo algunas dudas técnicas que espero puedan aclararme. Mi sitio no es solo informativo: es una herramienta
    • Make Task ID and Issue ID columns filterable like all other columns

      Hello Zoho Projects Team, We hope you are doing well. We would like to submit a feature request regarding the Task ID and Issue ID columns in Zoho Projects list views. Current Limitation: As of now, in both the Tasks and Issues modules, almost every visible
    • Improve Back Navigation (X Button) Inside Nested Milestones, Task Lists, Tasks, and Issues

      Hi Zoho Projects Team, We would like to request an improvement to the X / close button navigation behavior inside milestones. Currently, the milestone area behaves as a nested hierarchy (tree structure): Project → Milestone → Task List → Task So when
    • Add a way to connect Log360 Cloud logs with Zoho analytics

      Hi, Several month ago Log360 Cloud was added to zoho one - and this is great. But as far as I see there is no prebuilt way to connect Zoho analytics to the logs we have in Log360 Cloud. Please add a prebuilt connection like we have for so many other zoho
    • Extend GitHub Commit Integration to Tasks in Zoho Projects

      Hello Zoho Projects Team, We hope you are doing well. We would like to submit a feature request regarding the current GitHub integration in Zoho Projects, specifically the ability to link commit information. Current Limitation: As of now, Zoho Projects
    • Enable Screen Recording in Zoho WorkDrive Mobile Apps (Android & iOS)

      Hi Zoho WorkDrive Team, How are you? We are enthusiastic Zoho One users and rely heavily on Zoho WorkDrive for internal collaboration and content sharing. The screen-recording feature in the WorkDrive web app (similar to Loom) is extremely useful- however,
    • Zoho Project - Total Forecasted Hours

      Does anyone know an easy way to get a total of all the forecasted hours across the portfolio? I'm aware trying to create a custom report that can generate this figure for each task and the total up but the completion percentage doesn't seem to come back
    • Bank Fees - Allow User to Choose Expense Account

      Bank fees from Customer Payments can only be debited against the system Bank Fees account due to hard-coding. The user should be able to select which expense account those fees are debited against. The use case is pretty straightforward. A business like
    • Attendance Kiosk Mode for all Employees

      Is it possible to assign a tablet (ios/android) so that all employees can check in or out using a simple QR code? If not would it be possible to integrate attendance with a web app that also has a tablet app that works in kiosk mode? If yes can anyone recommend such an app?
    • Next Page