Mailing List Archive: SPF: Help

SPF Confusion!

Index | Next | Previous | View Threaded

AEAvery at USE

Oct 30, 2006, 12:50 PM

Post #1 of 4 (1206 views)
Permalink

SPF Confusion!

I am getting some reports that email is being refused from our server and
presume it has to do with their server using SPF. I have tried to setup my TXT
file, but, am confused as to where it really goes.

Here is my configuration

My mail server registration is usehub1.salvationarmy-use.org

My mail domain is: use.salvationarmy.org (We are a sub-domain for our
international comany for e-mail. We do not use salvationarmy-use.org for
e-mail. It is simply the domain we coul register for our server under our ISP)

Where does my SPF record go? use.salvationarmy.org or salvationarmy-use.org?

Since I do use a diferent domain for mail thatn the server, do I have to include
the other server name or something??

Thanks for any assistance you can provide!

Al

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

alex at ergens

Oct 30, 2006, 1:40 PM

Post #2 of 4 (1081 views)
Permalink

Re: SPF Confusion! [In reply to]

On Mon, Oct 30, 2006 at 08:50:02PM +0000, Al wrote:

> I am getting some reports that email is being refused from our server and
> presume it has to do with their server using SPF.

You currently have no SPF record for your domain. How can the
other side say your server is not listed in your SPF record ?

Perhaps the HELO parameter is used by an unauthorized server, I
can't tell from the available data.

> My mail domain is: use.salvationarmy.org (We are a sub-domain for our
> international comany for e-mail. We do not use salvationarmy-use.org for
> e-mail. It is simply the domain we coul register for our server under our ISP)
>
> Where does my SPF record go? use.salvationarmy.org or salvationarmy-use.org?

The first domain.

It works like this:

1: take the domain part of the email sender address
2: look this up in DNS, and use the SPF record found (if any)
3: see if the connected ip address (the one trying to deliver a message)
is on the list of authorized hosts

So if you send as AEAvery[at]USE.SalvationArmy.Org, then the other
side will look for SPF(USE.SalvationArmy.Org)

The same may happen for the HELO parameter. I can't tell from the headers
which HELO your server is using.

> Since I do use a diferent domain for mail thatn the server, do I have to include
> the other server name or something??

You use one server to send your mail?
Does this server have a static IP address?
If "yes" to both: list that address.

You said you use "usehub1.salvationarmy-use.org" as mailserver.
This one has address 12.27.81.67

However, your mail reached this list from 12.27.81.76, which has no name.

A configuration error perhaps? But even then, this should not result
in an SPF error.

Alex

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

mfidelman at meetinghouse

Oct 30, 2006, 1:41 PM

Post #3 of 4 (1091 views)
Permalink

Re: SPF Confusion! [In reply to]

Al wrote:
> I am getting some reports that email is being refused from our server and
> presume it has to do with their server using SPF. I have tried to setup my TXT
> file, but, am confused as to where it really goes.
>
>
Not necessarily a good assumption (though it might well be the reason) -
there are lots of reasons that your mail might be getting refused.

1. Check your log files to see what they say.
2. Go to www.dnsstuff.com and run the various tests (particularly the
one to check against various antispam blacklists)
3. take note that there seem to be a new set of anti-spam mechanisms
floating around that simply block a host based on a large number of
emails coming through - I run a bunch of lists for local PTOs and the
batch of beginning-of-school-year messages that went out led to our
lists getting blocked by the local school system's brand spanking new
anti-spam utility
4. re. SPF and how to format messages - take a look at www.openspf.org
for info

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

steve at teamITS

Oct 30, 2006, 3:24 PM

Post #4 of 4 (1085 views)
Permalink

RE: SPF Confusion! [In reply to]

Alex van den Bogaerdt <mailto:alex[at]ergens.op.het.net> wrote on Monday,
October 30, 2006 3:40 PM:
> However, your mail reached this list from 12.27.81.76, which has no
name.

I think Alex is on the right track...if your outgoing SMTP
server has no reverse DNS lookup, several ISPs (such as AOL) will reject
mail based on that.

- Steve Yates
- ITS, Inc.
- It's not a bug - it's a hidden feature.

~ Taglines by Taglinator - www.srtware.com ~

-------
Archives at http://archives.listbox.com/spf-help/current/ or
http://www.gossamer-threads.com/lists/spf/help/ (easier to search)
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?member_id=1311530&user_secret=cbdbbc81

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com