I also can see that the reason we’re seemingly failing on SPF is because some IPs, such as the one shown below, are not found in our domain SPF record? These IPs are bogon IPs - private-use network IPs, which are for some reason showing up in our message headers. Why would we need to put private IPs in our SPF record?
