Skip to content
Orange (orange.fr and wanadoo.fr)

OFR_519: sending IP not authorised by SPF

Orange refused your mail because the sending IP is not authorised in your domain's SPF record to send for that domain.

Orange
Provider
Sources checked
Author

At a glance

Code
OFR_519
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.

What it means

SPF lets a domain list, in a DNS TXT record, the servers allowed to send mail for it. Code 519 means the record works, but the IP that delivered your message is not on it, so the SPF check failed and Orange refused the mail. This is common after adding a new sending service or moving servers. Orange asks you to verify the SPF configuration of your MAIL FROM domain, and suggests checking it with MxToolBox's SPF lookup.

Common causes

  • A new server or sending service was not added to the SPF record.
  • Mail is relayed or forwarded through a server the record does not list.
  • The envelope domain is not the one whose record you maintain.

How to fix it

  1. 01Find the sending IP in the bounce or your logs.
  2. 02Add that server, or the include of your sending service, to the SPF record of the MAIL FROM domain.
  3. 03If you changed DNS recently, allow time for caches to expire before retrying; Orange notes that TTLs are typically up to 24 hours.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. OFR_397/398SPF error for the sender domain.Orange could not use your sender domain's SPF record, because it is broken or invalid. Check the SPF TXT record of the domain.Orange
  2. OFR_515DMARC failed, rejected by your policy.Your message failed DMARC, and Orange rejected it because your domain's DMARC policy asks for that.Orange

Further reading

All 20 Orange codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer