Microsoft/Office 365 SMTP
Hello, has anyone succeed in using Microsoft 365 as SMTP host for the automated emails like password recovery? I'm following the following guide to configure it Microsoft side but.. big nope https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365
what did you use for the values (exclusing user and pass) and what's the error you're getting?
host: smtp.office365.com port: 587 use TLS: true
user: an actual mailbox password: an App Password created from the user
I don't get errors from Appwrite (Cloud) but simply I don't receive emails. I don't even see login tentatives in the "Microsoft Entra admin center"
found it: I needed to allow legacy/basic authentication for the organization in order to use App Passwords for SMTP
https://learn.microsoft.com/en-gb/azure/active-directory/fundamentals/security-defaults
Now the question is: using <:appwrite:637383039499894787> Cloud, which is the server IP(s?) that are used to send?
I need to properly set the spf record to do not mark AW emails as SPAM
that is a good question...let me check with the team
Any news on the topic?
Sorry, it's been hectic. Let me follow up with the team
Hmm I don't think we'll be able to publicize that info...perhaps adding some SPF record that says Microsoft/office365 is sending the email might be enough?
Uhm, actually as we're using SMTP AUTH it may be enough but this does not explain why it gets to the SPAM folder. I'm sending from an M365 configured domain to another M365 configured domain and the SPF is a pass looking the email's header but still it gets to the SPAM folder... need to look into that more deeper
thank you Microsoft for such detail 🙃
well, mail-tester.com gives a (good) score as 9/10 so it's some stupid Microsoft rule that marks it as SPAM.
An info that it's worth checking, as is the reason for the -1 point, is that there are 2 broken links in the base template: https://github.com/appwrite/appwrite/blob/49155a97d42a152f26e188a3910548bc209785d8/app/config/locale/templates/email-base.tpl#L5
the two Google links marked as preconnect are giving 404 and that's seen as a problem by the antispam
I believe that this Discord ticket can be marked as solved!
maybe there's something about DMARC or DKIM too? 🤷🏼♂️ this type of stuff is really cryptic and annoying
