Mailing List Archive: SPF: Discuss

SPF question

Index | Next | Previous | View Threaded

boise_bound at hotmail

Nov 25, 2007, 8:49 PM

Post #1 of 8 (1920 views)
Permalink

SPF question

I have used the SPF wizard a while ago, and have the TXT file in my DNS as:

v=spf1 mx:mail.site.com.com ip4:71.36.27.200 -all
And I thought it was working correctly, but when I just sent a email tonight, I got a message back that said

Sender is forged (SPF Fail)

So.......what is the problem??

I changed the TLD name and the IP just to be safe for this posting, but they are the correct ones for my site.

Steve

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

scott at kitterman

Nov 25, 2007, 10:14 PM

Post #2 of 8 (1845 views)
Permalink

Re: SPF question [In reply to]

On Sunday 25 November 2007 23:49, Steve wrote:
> I have used the SPF wizard a while ago, and have the TXT file in my DNS as:
>
> v=spf1 mx:mail.site.com.com ip4:71.36.27.200 -all
> And I thought it was working correctly, but when I just sent a email
> tonight, I got a message back that said
>
> Sender is forged (SPF Fail)
>
> So.......what is the problem??
>
> I changed the TLD name and the IP just to be safe for this posting, but
> they are the correct ones for my site.

This is more of an spf-help question, but ...

First, I'm going to assume that mail.site.com.com is mail.site.com.

Does mail.site.com.com have an MX record? I except not. I expect is is an MX
and that what you want is a:mail.site.com.

Scott K

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

boise_bound at hotmail

Nov 26, 2007, 6:51 AM

Post #3 of 8 (1840 views)
Permalink

RE: SPF question [In reply to]

In regards to your question, yes, there is a MX record for mail.site.com

steve

> From: scott [at] kitterman> To: spf-discuss [at] v2> Subject: Re: [spf-discuss] SPF question> Date: Mon, 26 Nov 2007 01:14:20 -0500> > On Sunday 25 November 2007 23:49, Steve wrote:> > I have used the SPF wizard a while ago, and have the TXT file in my DNS as:> >> > v=spf1 mx:mail.site.com.com ip4:71.36.27.200 -all> > And I thought it was working correctly, but when I just sent a email> > tonight, I got a message back that said> >> > Sender is forged (SPF Fail)> >> > So.......what is the problem??> >> > I changed the TLD name and the IP just to be safe for this posting, but> > they are the correct ones for my site.> > This is more of an spf-help question, but ...> > First, I'm going to assume that mail.site.com.com is mail.site.com.> > Does mail.site.com.com have an MX record? I except not. I expect is is an MX > and that what you want is a:mail.site.com.> > Scott K> > -------------------------------------------> -----------------------------------------------------------------------> Sender Policy Framework: http://www.openspf.org/> Archives at http://archives.listbox.com/spf-discuss/current/> To unsubscribe, change your address, or temporarily deactivate your> subscription,> please go to http://v2.listbox.com/member/?list_id=735> Powered by Listbox: http://www.listbox.com

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

scott at kitterman

Nov 26, 2007, 7:24 AM

Post #4 of 8 (1846 views)
Permalink

Re: SPF question [In reply to]

On Monday 26 November 2007 09:51, Steve wrote:
> In regards to your question, yes, there is a MX record for mail.site.com
>
> steve

OK. Then I give on trying to help out without actual domains/IP addresses.

Scott K

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

boise_bound at hotmail

Nov 26, 2007, 8:18 AM

Post #5 of 8 (1841 views)
Permalink

RE: SPF question [In reply to]

Site is salleboise.com
mailserver is 71.36.27.213

> From: scott [at] kitterman> To: spf-discuss [at] v2> Subject: Re: [spf-discuss] SPF question> Date: Mon, 26 Nov 2007 10:24:11 -0500> > On Monday 26 November 2007 09:51, Steve wrote:> > In regards to your question, yes, there is a MX record for mail.site.com> >> > steve> > OK. Then I give on trying to help out without actual domains/IP addresses.> > Scott K> > -------------------------------------------> -----------------------------------------------------------------------> Sender Policy Framework: http://www.openspf.org/> Archives at http://archives.listbox.com/spf-discuss/current/> To unsubscribe, change your address, or temporarily deactivate your> subscription,> please go to http://v2.listbox.com/member/?list_id=735> Powered by Listbox: http://www.listbox.com

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

Marc.Chametzky at Sun

Nov 26, 2007, 8:29 AM

Post #6 of 8 (1843 views)
Permalink

Re: SPF question [In reply to]

Looking at your SPF record, it would appear that it's mostly functional,
although your mx mechanism is specified wrong as there are no mx records
for mail.salleboise.com. Instead, it probably should read:

v=spf1 mx:salleboise.com ip4:71.36.27.213 -all

Now, since currently the only MX record for salleboise.com is the same
as that IP address, it would be slightly preferable to swap them to
avoid a DNS lookup that's otherwise unnecessary, leaving the mx
mechanism as a backup:

v=spf1 ip4:71.36.27.213 mx:salleboise.com -all

Given that, if I were to receive mail from user [at] salleboise coming
from IP address 71.36.27.213, my MTA would return "Pass" for it.

It's possible that you sent your failing message to a mailing list that
then forwarded your message from the original address, but now on a
different server, thus the IP address wouldn't match your SPF record.

--Marc

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

Dan_Mitton at Notes

Nov 26, 2007, 8:35 AM

Post #7 of 8 (1842 views)
Permalink

RE: SPF question [In reply to]

It looks like your SPF record is not valid. I see:

"v=spf1 mx:mail.salleboise.com ip4:71.36.27.213 -all"

I believe it should be:

"v=spf1 mx ip4:71.36.27.213 -all"

or better yet:

"v=spf1 ip4:71.36.27.213 mx -all" (since if it comes from ip address
71.36.27.213, spf never need to do the mx record lookup)

or simply:

"v=spf1 mx -all"

or

"v=spf1 ip4:71.36.27.213 -all"

Please respond to spf-discuss [at] v2

To: spf-discuss [at] v2
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject: RE: [spf-discuss] SPF question
LSN: Not Relevant
User Filed as: Not a Record

Site is salleboise.com
mailserver is 71.36.27.213

> From: scott [at] kitterman
> To: spf-discuss [at] v2
> Subject: Re: [spf-discuss] SPF question
> Date: Mon, 26 Nov 2007 10:24:11 -0500
>
> On Monday 26 November 2007 09:51, Steve wrote:
> > In regards to your question, yes, there is a MX record for
mail.site.com
> >
> > steve
>
> OK. Then I give on trying to help out without actual domains/IP
addresses.
>
> Scott K
>
> -------------------------------------------
> -----------------------------------------------------------------------
> Sender Policy Framework: http://www.openspf.org/
> Archives at http://archives.listbox.com/spf-discuss/current/
> To unsubscribe, change your address, or temporarily deactivate your
> subscription,
> please go to http://v2.listbox.com/member/?list_id=735
> Powered by Listbox: http://www.listbox.com

Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735

-------------------------------------------
-----------------------------------------------------------------------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?list_id=735
Powered by Listbox: http://www.listbox.com

Dan_Mitton at Notes

Nov 26, 2007, 9:35 AM

Post #8 of 8 (1617 views)
Permalink

RE: [spf-discuss] SPF question [In reply to]

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads