OFR_519: sending IP not authorised by SPF
Orange refused your mail because the sending IP is not authorised in your domain's SPF record to send for that domain.
- Orange
- Provider
- Sources checked
- Author
At a glance
- Code
- OFR_519
- Who has to act
- The sender. The fix is on the sending side: your domain, your server or your list.
What it means
SPF lets a domain list, in a DNS TXT record, the servers allowed to send mail for it. Code 519 means the record works, but the IP that delivered your message is not on it, so the SPF check failed and Orange refused the mail. This is common after adding a new sending service or moving servers. Orange asks you to verify the SPF configuration of your MAIL FROM domain, and suggests checking it with MxToolBox's SPF lookup.
Common causes
- A new server or sending service was not added to the SPF record.
- Mail is relayed or forwarded through a server the record does not list.
- The envelope domain is not the one whose record you maintain.
How to fix it
- 01Find the sending IP in the bounce or your logs.
- 02Add that server, or the include of your sending service, to the SPF record of the MAIL FROM domain.
- 03If you changed DNS recently, allow time for caches to expire before retrying; Orange notes that TTLs are typically up to 24 hours.
Sources
What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.
- Orange Postmaster Page (SMTP Delivery Guidelines and Error Codes)postmaster.orange.fr
Related codes
- OFR_397/398SPF error for the sender domain.Orange could not use your sender domain's SPF record, because it is broken or invalid. Check the SPF TXT record of the domain.
- OFR_515DMARC failed, rejected by your policy.Your message failed DMARC, and Orange rejected it because your domain's DMARC policy asks for that.
Further reading
All 20 Orange codesEvery code in the wikiPaste your own bounce