# SendGrid - E-mail deliverability issue
### Background
As of June 2023, HHS is deprecating Cisco IronPorts for relaying email to external users and requiring all systems that leverage its SMTP server for communications with external users to obtain an email service provider and share the DKIM and SPF records with the HHS DNS team to enable the system to send emails from `.acf.hhs.gov` domains.

We selected SendGrid as our new e-mail relay

### STTs blocked by [proofpoint](https://ipcheck.proofpoint.com/?ip=159.183.139.153)

* Montana
* Louisiana
* California
* Hawaii
* Rhode Island
* Missouri
* Mass
* Manilla
* dhs.ga.gov

Error: 554 Blocked - see https://ipcheck.proofpoint.com/?ip=159.183.139.153

### [OLD - keep for history] 9.7 [SendGrid Ticket](https://support.sendgrid.com/hc/en-us/requests/13461001) Update
- SG support response:
> I am so sorry to hear you have had troubles with your dedicated IP and microsoft blacklisting the IP. I am happy to help resolve this issue with you and get these blacklistings cleared. 
> I did take a look into this issue and found those bounced reason codes you are referring to. It seems you have not sent too many emails yet so I am guessing you are still in IP Warm up which is great! However, this also means there may be an issue with your IP not being cleared of any previous microsoft blacklistings before this IP was given to you. I am very sorry for this as our dedicated IPs are cleaned and cleared before we assign them to accounts. I am happy to hear you were able to submit these delisting requests to microsoft. However, if you would like me to assign you a new dedicated IP instead to your account, I am happy to do this since this is not your fault. 
> Otherwise, those delisting requests usually get resolved within 48 -72 hours in my experience. I also want to point out that you do have domain authentication set up with your FROM domain, which is awesome! But you will also want to set up link branding to prevent any future deliverability issues. So I would recommend doing this as soon as possible as well! Here is our documentation with information on how to set this up here: [https://docs.sendgrid.com/ui/account-and-settings/how-to-set-up-link-branding](https://docs.sendgrid.com/ui/account-and-settings/how-to-set-up-link-branding)

Next Steps:
- Revert to request updated dedicated IP (not submitted yet)
- [Explore link branding document](https://docs.sendgrid.com/ui/account-and-settings/how-to-set-up-link-branding)
- Explore SBF records, SBF check via Dagan (Raft)

Current State:

; <<>> DiG 9.10.6 <<>> tanfdata.af.hhs.gov txt
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51137
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;tanfdata.af.hhs.gov.        IN    TXT

;; AUTHORITY SECTION:
hhs.gov.        3600    IN    SOA    rh120ns1.368.dhhs.gov. hostmaster.psc.hhs.gov. 2023090604 9000 1200 2419200 3600

;; Query time: 166 msec
;; SERVER: 192.168.50.1#53(192.168.50.1)
;; WHEN: Thu Sep 07 12:48:19 PDT 2023
;; MSG SIZE  rcvd: 117

Expected state w/ SBF
Note: `"v=spf1 include:spf.protection.outlook.com -all"` line in the `dagan.dev` response.

; <<>> DiG 9.10.6 <<>> dagan.dev txt
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46706
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;dagan.dev.            IN    TXT

;; ANSWER SECTION:
dagan.dev.        900    IN    TXT    "v=spf1 include:spf.protection.outlook.com -all"

;; Query time: 187 msec
;; SERVER: 192.168.50.1#53(192.168.50.1)
;; WHEN: Thu Sep 07 12:48:52 PDT 2023
;; MSG SIZE  rcvd: 168