i have e-mails that are being rejected due to an SPF record issue. this is occuring on the two domains i have setup for store and forward service: justinalbrecht.com & albrechtclanpdx.com.

i need to get this corrected. i've tried modifying the SPF records for my domains to no avail. attached are screenshots of the errors i am receiving.

here is a text copy of the error as well:

milter-reject for END-OF-MESSAGE. 5.7.1 rejected by SPF policy for mx1.wiredblade.com with invalid ARC result. <justin@justinalbrecht.com>: Recipient address rejected: Message rejected due to: SPF fail - not authorized. Please see http://www.open-spf.org/Why?s=helo;id=mx1.wiredblade.com;ip=162.216.242.37;r=justin@justinalbrecht.com

here is a copy of the headers from the e-mail:

Authentication-Results: mail.justinalbrecht.com;
dkim=pass header.d=enpass.io header.s=5d2uomcecbfp6tn4oxetezkrmu7f3qf6 header.b=eonGazuC;
dkim=pass header.d=amazonses.com header.s=uku4taia5b5tsbglxyj6zym32efj7xqv header.b=iLMdaeMg;
spf=fail (mail.justinalbrecht.com: domain of 01020192437cbe5b-7840cbbd-2a81-4998-b67c-8b570c508b74-000000@mailer.enpass.io does not designate 162.216.242.37 as permitted sender) smtp.mailfrom=01020192437cbe5b-7840cbbd-2a81-4998-b67c-8b570c508b74-000000@mailer.enpass.io;
dmarc=pass (policy=quarantine) header.from=enpass.io
Authentication-Results: mail.justinalbrecht.com; dmarc=pass (p=quarantine dis=none) header.from=enpass.io
Authentication-Results: mail.justinalbrecht.com;
dkim=pass (1024-bit key) header.d=enpass.io header.i=@enpass.io header.b=eonGazuC;
dkim=pass (1024-bit key) header.d=amazonses.com header.i=@amazonses.com header.b=iLMdaeMg
Received-SPF: Fail (SPF fail - not authorized) identity=mailfrom; client-ip=162.216.242.37; helo=mx1.wiredblade.com; envelope-from=01020192437cbe5b-7840cbbd-2a81-4998-b67c-8b570c508b74-000000@mailer.enpass.io; receiver=justin@justinalbrecht.com
Received: from b229-73.smtp-out.eu-west-1.amazonses.com (b229-73.smtp-out.eu-west-1.amazonses.com
[69.169.229.73]) by mx1.wiredblade.com with ESMTPS (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256
bits=128) ; Mon, 30 Sep 2024 15:11:43 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=5d2uomcecbfp6tn4oxetezkrmu7f3qf6;
d=enpass.io; t=1727709101; h=Content-Type:MIME-Version:Subject:From:To:Date:Message-ID;
bh=b7fSvOmELbGboQIbB6Ad7jM5vcoX1hRm7oIE1kqWn0M=; b=eonGazuClzG+LfiGZhIkRwK5N+LJx9FoMQaWv82yzh+FmuVVmw51Ppc4uuaooMl3
QH5XjzuadE9vzIF8ZGEZAv4crs0h/1d2n55Tw3HCCxuwkYYG6ZChnWXkVwZHppZy5QC
8Sx/AFUJcz3jIlL5cjZJRoN7U2E5CGswnRF1ttWw=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=uku4taia5b5tsbglxyj6zym32efj7xqv;
d=amazonses.com; t=1727709101; h=Content-Type:MIME-Version:Subject:From:To:Date:Message-ID:Feedback-ID;
bh=b7fSvOmELbGboQIbB6Ad7jM5vcoX1hRm7oIE1kqWn0M=; b=iLMdaeMgJSMvMMIjlTSEjRoX2mawWmCRXGfu+E/H5aNu22BhFUpKZCEXCKIk8kG2
oqT63K/aZlypcCm0KXqrzhA6mfQcQar3cc39Dpe6pIFHrJB05rdXF+vbHBc4yYZxank
qDGnAfMwV2Ur+4VglYwsjqU6LZwpwehod6Y7Fcz4=
From: Enpass <do-not-reply@enpass.io>
To: justin@justinalbrecht.com
Date: Mon, 30 Sep 2024 15:11:41 +0000
X-Synology-Spam-Status: score=0.101, required 5, FROM_HAS_DN 0, FROM_NEQ_ENVFROM 0, TO_DN_NONE 0, MIME_GOOD -0.1, R_SPF_FAIL 0, HTML_MESSAGE 0.001, REDIRECTOR_URL 0, ONCE_RECEIVED 0.1, ASN 0, SYNO_SPF_HEADER 0, RCVD_COUNT_ONE 0, MISSING_XM_UA 0, DMARC_POLICY_ALLOW_WITH_FAILURES -0.5, DKIM_TRACE 0, RCVD_TLS_ALL 0, DMARC_POLICY_ALLOW 0, HTML_MISSING_CTYPE 0, __NOT_A_PERSON 0, TO_MATCH_ENVRCPT_ALL 0, MX_INVALID 0.5, URIBL_BLOCKED 0, R_DKIM_ALLOW -0.2, URI_COUNT_ODD 0, FORGED_SENDER 0.3, ARC_NA 0, MIME_TRACE 0, RCPT_COUNT_ONE 0, __NOT_SPOOFED 0
X-Synology-Spam-Flag: no
X-Synology-Virus-Status: no