Mailing List Archive: SPF: Help

New User Help!

Index | Next | Previous | View Threaded

ray.caruso at netvion

Aug 5, 2005, 10:28 PM

Post #1 of 5 (938 views)
Permalink

New User Help!

Hello,

We have tried to publish an SPF record, but mail kept getting flagged as
SPAM at one of our client's mail providers.
We have since deleted the record. As I understand, I would publish an
SPF record that lists the IP address of my outgoing mail server's IP.
That would be, for our domain, the IP range of
216.17.144.193-216.16.144.206.
That would translate into the following spf record:

TXT "v=spf1 ip4:216.17.144.193/4 -all"

Is this correct?

Thanx in advance

Rayman

--
Ray Caruso

Netvion, Inc.
1015-M South Taft Hill Road
Suite 409
Fort Collins, CO 80521

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=8085f1ba

spf2 at kitterman

Aug 5, 2005, 10:42 PM

Post #2 of 5 (927 views)
Permalink

RE: New User Help! [In reply to]

>-----Original Message-----
>From: owner-spf-help [at] v2
>[mailto:owner-spf-help [at] v2]On Behalf Of Ray Caruso
>Sent: Saturday, August 06, 2005 1:29 AM
>To: spf-help [at] v2
>Subject: [spf-help] New User Help!
>
>
>Hello,
>
>We have tried to publish an SPF record, but mail kept getting flagged as
>SPAM at one of our client's mail providers.
>We have since deleted the record. As I understand, I would publish an
>SPF record that lists the IP address of my outgoing mail server's IP.
>That would be, for our domain, the IP range of
>216.17.144.193-216.16.144.206.
>That would translate into the following spf record:
>
> TXT "v=spf1 ip4:216.17.144.193/4 -all"
>
>Is this correct?
>
The syntax is correct, but not what you want.

See this for info on CIDR ranges:

http://www.subnet-calculator.com/cidr.php

What you have now covers 208.0.0.0 - 223.255.255.255. I think you are after
TXT "v=spf1 ip4:216.17.144.193/28 -all" That covers 216.17.144.192 -
216.17.144.207, but not that's not exactly what you are after.

You might do TXT "v=spf1 -ip4:216.17.144.192 -ip4:216.17.144.207
ip4:216.17.144.193/28 -all. That covers exactly what you said you wanted.

I would also strongly recommend against publishing -all right away. You
want to test first and make sure you understand all the implications of
publishing -all before you do. If you want to experiment, the validator is
here:

http://www.kitterman.com/spf/validate.html

Scott K

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=8085f1ba

lennon at orcon

Aug 5, 2005, 11:31 PM

Post #3 of 5 (909 views)
Permalink

Re: New User Help! [In reply to]

Kitterman says...

> What you have now covers 208.0.0.0 - 223.255.255.255. I think you are
> after
> TXT "v=spf1 ip4:216.17.144.193/28 -all" That covers 216.17.144.192 -
> 216.17.144.207, but not that's not exactly what you are after.

Doing a whois

NET-RAYMAN-01 = 216.17.144.192 - 216.17.144.207
So that should be really ...

v=spf1 ip4:216.17.144.192/28 -all

That will cover every machine in your network to be allowed to send from
your domain
But does every machine actually send? All 13 (14 possible machines - 1
default GW) possible machines sends emails from your domain? or does only 1
machine only send emails from the domain?

Thanks
Craig

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=8085f1ba

alex at ergens

Aug 6, 2005, 1:31 AM

Post #4 of 5 (935 views)
Permalink

Re: New User Help! [In reply to]

On Fri, Aug 05, 2005 at 11:28:54PM -0600, Ray Caruso wrote:

> We have tried to publish an SPF record, but mail kept getting flagged as
> SPAM at one of our client's mail providers.

Why do you think it is an SPF problem? The "S" in SPF does NOT stand
for SPAM.

Maybe that filter is stupid, filters on forbidden words (like SEX) and
finds an MsexCHANGE server (really, I've seen this happen).

Maybe your mail does seem remarkably similar to spam and scores too
many points.

Maybe they notice you're on DSL and block everything from such networks.

I mean: welcome to SPF but don't expect it to be a magic bullit.

Alex

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=8085f1ba

ray.caruso at netvion

Aug 6, 2005, 10:21 AM

Post #5 of 5 (912 views)
Permalink

Re: New User Help! [In reply to]

Scott Kitterman wrote:

>
>
>>-----Original Message-----
>>From: owner-spf-help [at] v2
>>[mailto:owner-spf-help [at] v2]On Behalf Of Ray Caruso
>>Sent: Saturday, August 06, 2005 1:29 AM
>>To: spf-help [at] v2
>>Subject: [spf-help] New User Help!
>>
>>
>>Hello,
>>
>>We have tried to publish an SPF record, but mail kept getting flagged as
>>SPAM at one of our client's mail providers.
>>We have since deleted the record. As I understand, I would publish an
>>SPF record that lists the IP address of my outgoing mail server's IP.
>>That would be, for our domain, the IP range of
>>216.17.144.193-216.16.144.206.
>>That would translate into the following spf record:
>>
>> TXT "v=spf1 ip4:216.17.144.193/4 -all"
>>
>>Is this correct?
>>
>>
>>
>The syntax is correct, but not what you want.
>
>See this for info on CIDR ranges:
>
>http://www.subnet-calculator.com/cidr.php
>
>What you have now covers 208.0.0.0 - 223.255.255.255. I think you are after
>TXT "v=spf1 ip4:216.17.144.193/28 -all" That covers 216.17.144.192 -
>216.17.144.207, but not that's not exactly what you are after.
>
>You might do TXT "v=spf1 -ip4:216.17.144.192 -ip4:216.17.144.207
>ip4:216.17.144.193/28 -all. That covers exactly what you said you wanted.
>
>I would also strongly recommend against publishing -all right away. You
>want to test first and make sure you understand all the implications of
>publishing -all before you do. If you want to experiment, the validator is
>here:
>
>http://www.kitterman.com/spf/validate.html
>
>Scott K
>
>
>
Oh, the mask indicator is for the network part of the address, not the
station part. Oh, no wonder!
Turns out I don't need the whole subnet, we have just one address that
is used for outbound NAT/PAT.
So, I just need to advertise the 216.17.144.206 address.

Thanx for all your help guy!!

Rayman

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=8085f1ba

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads