Email Failure DNS DKIM DMARC

Google Workspace

(Work → Gmail fails, Gmail → work succeeds)

THE FIX (THIS WORKS)

>> Remove Mailgun from SPF (IMPORTANT)

This is the most common fix in your exact situation.

Change SPF to Google-only: v=spf1 include:_spf.google.com ~all

______________________________________

Most common causes (in order of likelihood)

1.⁠ ⁠Emails are going to Gmail Spam or filtered folders

Even if you don’t see them:

In Gmail

1. Search:

from:@humanconcernusa.org

2. Check Spam, All Mail, Promotions, and Updates

3. If found in Spam:

• Open the email

• Click “Not Spam”

• Click the three dots → “Filter messages like these” → Create filter

• Choose Never send it to Spam

2.⁠ ⁠Gmail is blocking or silently rejecting the domain

Gmail may distrust the sending domain if authentication isn’t correct.

Fix (important):

1. Open Gmail Settings

2. Go to Filters and Blocked Addresses

3. Make sure:

• @humanconcernusa.org is NOT blocked

4. Go to See all settings → Accounts and Import

5. Under Send mail as, make sure nothing unusual is set

3.⁠ ⁠SPF / DKIM / DMARC issue on humanconcernusa.org (VERY common)

If the domain’s email authentication is misconfigured, Gmail will reject or spam the email without notifying you.

This is the #1 cause when:

• Some recipients receive emails

• Gmail does NOT

How to confirm quickly

Send an email from your work email to:

check-auth@verifier.port25.com

You’ll get a reply showing:

• SPF

• DKIM

• DMARC

If any fail, Gmail may block delivery.

4.⁠ ⁠The email server IP is blacklisted

If your work email server is on a spam blacklist, Gmail may refuse delivery.

Signs:

• No bounce-back

• Email “sends” successfully

• Gmail never receives it

You can test by asking:

• Does sending to Outlook / Yahoo work?

• If yes → Gmail-specific blocking

• If no → server reputation issue

5.⁠ ⁠Gmail alias / forwarding issue (if used)

If you:

• Forward emails to Gmail

• Use aliases

• Use Google Workspace routing

Then Gmail may be discarding forwarded messages.

Check:

• Settings → Forwarding and POP/IMAP

• Disable forwarding temporarily and test again

Quick tests to isolate the problem (do these now)

1. Send from work email → another Gmail address (friend or secondary)

2. Send from work email → Outlook.com

3. Reply to an email originating from Gmail (thread reply)

Tell me:

• Which ones arrive

• Which do not

GoDaddy. Follow exactly these steps.

STEP 1: Log into GoDaddy DNS

1. Go to GoDaddy → My Products

2. Find humanconcernusa.org

3. Click DNS

We’ll check SPF, DKIM, and DMARC.

STEP 2: FIX SPF (MOST IMPORTANT)

Look for existing SPF records

In Records, find TXT records with:

v=spf1

IMPORTANT RULE

⚠️ You must have ONLY ONE SPF record

Correct SPF record (Google Workspace)

If you already have one:

• Edit it so it looks like this:

Type: TXT

Host: @

Value:

v=spf1 include:_spf.google.com ~all

TTL: 1 hour

If you have more than one SPF record:

• Merge them into ONE

• Delete the extras

STEP 3: FIX DKIM (REQUIRED)

In Google Admin:

1. Go to admin.google.com

2. Apps → Google Workspace → Gmail

3. Authenticate email

4. Select domain: humanconcernusa.org

5. Click Generate new record

• Key length: 2048-bit

• Selector: google

Google will give you a TXT record.

Add DKIM record in GoDaddy

Back in GoDaddy DNS → Add Record:

Type: TXT

Host:

google._domainkey

Value: (paste the long DKIM value from Google)

TTL: 1 hour

➡️ Save it

➡️ Go back to Google Admin and click Start Authentication

Status should say ON.

STEP 4: ADD DMARC (Highly Recommended)

In GoDaddy DNS → Add Record:

Type: TXT

Host:

_dmarc

Value:

v=DMARC1; p=none; rua=mailto:dmarc@humanconcernusa.org; ruf=mailto:dmarc@humanconcernusa.org; fo=1

TTL: 1 hour

If dmarc@humanconcernusa.org doesn’t exist yet, create it in Google Workspace or temporarily remove the rua/ruf parts.

STEP 5: WAIT & TEST (VERY IMPORTANT)

⏱️ DNS propagation: 15 minutes – 2 hours (sometimes up to 24)

After 1 hour, test:

1. Send work → Gmail (new email, not reply)

2. Send work →

check-auth@verifier.port25.com

You want:

• SPF: PASS

• DKIM: PASS

• DMARC: PASS / NONE

STEP 6: Gmail-side safety (1 minute)

On your Gmail account:

1. Search:

from:@humanconcernusa.org

2. If anything appears in Spam:

• Mark Not Spam

• Add sender to Contacts

WHY THIS WILL FIX IT

• Gmail was silently dropping unauthenticated mail

• Outlook is more forgiving

• Replies worked because Gmail trusted the thread

Once SPF + DKIM are aligned, Gmail must accept your emails.