Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SPF: Help

More Information

 

 

SPF help RSS feed   Index | Next | Previous | View Threaded


support at phoenix-com

Mar 25, 2008, 6:54 AM

Post #1 of 3 (508 views)
Permalink
More Information

Hi All:



I follow the recommendations made from the group and I am still
getting the same garbage mail in supposedly coming from our domain. I
copied the header information so everyone can see what the problem is and
hopeful provide some additional insight as to the solution to my problem.
This is a real email header; however no such account exists in our system.
It is the information that is most important.



Here is the info:



Received: from 78-159-85-28.net.fone.pl [78.159.85.28] by phoenix-com.net
with SMTP (HELO ppp-tucnv635kjo)

(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.9.3)); Tue,
25 Mar 2008 06:32:59 -0600

X-Originating-IP: [78.159.85.28]

X-Originating-Email: [pyibiv[at]phoenix-com.net]

X-Sender: pyibiv[at]phoenix-com.net

Received: (qmail 2770 by uid 354); Tue, 25 Mar 2008 12:19:09 -1200

Message-Id: <20080325001909.2772.qmail[at]ppp-tucnv635kjo>

To: <pyibiv[at]phoenix-com.net>

Subject: RE: MedHelp id 467442

From: <pyibiv[at]phoenix-com.net>

MIME-Version: 1.0

Importance: High

Content-Type: text/html; charset="ISO-8859-1"

Content-Transfer-Encoding: 7bit

Return-Path: <pyibed[at]rjfagencies.com>

X-Envelope-From: pyibed[at]rjfagencies.com

X-Envelope-To: pyibiv[at]phoenix-com.net

Date: Tue, 25 Mar 2008 06:32:59 -0600

SPF-Received: none We have a published SPF record. It follows.







v=spf1 ptr ip4:209.90.89.218 ip4:209.90.89.219 ~all



As one can see the IP address the message came from is not in our record as
being permitted to send. My thinking was that with the SPF record I
shouldn’t be getting this because it is not originating from a
phoenix-com.net approved mail server. Am I missing something here? Is my
record incomplete? Any help would be greatly appreciated.







Technical Support Group

Phoenix Communications Corporation

PH: (801) 831-7064





"Bringing your business into the 21st Century"





Our company accepts no liability for the content of this email, or for the
consequences of any actions taken on the basis of the information provided,
unless that information is subsequently confirmed in writing. Any views or
opinions presented in this email are solely those of the author and do not
necessarily represent those of the company. WARNING: Computer viruses can be
transmitted via email. The recipient should check this email and any
attachments for the presence of viruses. The company accepts no liability
for any damage caused by any virus transmitted by this email.

Phoenix Communications Corporation, 5526 W. 13400 S, #226, Herriman, UT.
84096-6919; www.phoenix-com.net




No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.22.0/1341 - Release Date: 3/24/2008
3:03 PM


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


steve at teamITS

Mar 25, 2008, 8:00 AM

Post #2 of 3 (473 views)
Permalink
RE: More Information [In reply to]

Technical Support wrote on 3/25/2008 8:54:58 AM:

> I follow the recommendations made from the group and I am
still
> getting the same garbage mail in supposedly coming from our domain.

There are two levels of answer to this. First, I would suggest
you change your SPF record to end in "-all" instead of "~all". The "~"
indicates you are still testing SPF.

Second, is ArGoSoft Mail Server Pro your mail server, and is it
set to check for SPF? (hint: even if the incoming message failed SPF,
the "~" in your SPF record should not result in the message being
rejected).

-----
SPF FAQ: http://www.openspf.org/FAQ
Common mistakes: http://www.openspf.org/FAQ/Common_mistakes

- Steve Yates
- ITS, Inc.
- This message is certified virus-free. There's no need to check.
Really.

~ Taglines by Taglinator - www.srtware.com ~

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com


alex at ergens

Mar 25, 2008, 8:18 AM

Post #3 of 3 (475 views)
Permalink
Re: More Information [In reply to]

On Tue, Mar 25, 2008 at 07:54:58AM -0600, Technical Support wrote:

>
> I follow the recommendations made from the group and I am still
> getting the same garbage mail in supposedly coming from our domain. I
> copied the header information so everyone can see what the problem is and
> hopeful provide some additional insight as to the solution to my problem.
> This is a real email header; however no such account exists in our system.
> It is the information that is most important.


You need to think 'letter inside an envelope'.

SPF works on the envelope. You are looking at the letter.


> From: <pyibiv[at]phoenix-com.net>


^^^^ on the letter


> Return-Path: <pyibed[at]rjfagencies.com>

^^^^ on the envelope


> SPF-Received: none We have a published SPF record. It follows.
>
>
> v=spf1 ptr ip4:209.90.89.218 ip4:209.90.89.219 ~all
>

I have two remarks on this SPF policy:

1: always place ip4 entries at the front. These do not require
additional DNS lookups.

2: When in doubt, do not use PTR. When not in doubt, discuss its
use here and become doubtful.

PTR is only useful in a handful of circumstances. Chances are
slim that you want it.


What do you think you would accomplish by using PTR ?


alex

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: http://www.listbox.com/member/archive/1020/=now
RSS Feed: http://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

SPF help RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.