Issues sending email to Outlook.com

We are seeing some email sent to Outlook, Hotmail, Live and MSN rejected with the following bounce-back error message:

550 5.7.1 Message rejected: Message lacks SPF/DKIM/DMARC Auth Records

Outlook.com appear to have started to reject email from domains without a DMARC record, even if they have SPF and/or DKIM in place.

Do I need to take any action?

Domains using our name servers: These are not affected, we automatically add a DMARC record for you.

Domains using external name servers: These need a DMARC record if they don’t currently have one.

If your domains use external name servers:

If your domains use external name servers, double check a DNS record called _dmarc exists. If it doesn’t exist, add the following DNS record to set one up:

Name: _dmarc
Type: TXT
Value: v=DMARC1; p=none;

If you are still having issues, please contact support with a copy of the bounce-back error message you receive.

Completed: PHP Security Updates

We have completed the updates to our PHP installations to protect against the recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

All PHP versions including 5.x, 7.x, and 8.x versions have been updated or patched.

Our Web Application Firewall and configuration changes are still in place to add an additional layer of security.

Update: PHP Security Updates

We are continuing to update our PHP installations to protect against the recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

99% of hosted web-sites are now using updated or patched PHP versions.

The updating process is taking longer than first anticipated, we expect this to be complete within the next 24 hours.

Our Web Application Firewall and configuration changes ensure the unpatched installations are secure against currently known exploits.

PHP Security Updates

We are currently updating our PHP installations to protect against the recent critical security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

Current Protection & Mitigations:

WAF Protection: Our Web Application Firewall is actively mitigating known exploit attempts to protect your websites.

PHP Configuration: We have disabled the session.upload_progress.enabled setting as an immediate secondary mitigation layer.

Update Progress:

The most widely used PHP versions have already been successfully updated or patched.

Older, lesser-used PHP versions are being patched and will be completed within the next 24 hours.

Action Required:

No action is required from you, and we do not anticipate any downtime during these updates.