Mailing List Archive: SPF: Help

SPF Queston

Index | Next | Previous | View Threaded

sneak147 at gmail

Jan 7, 2009, 11:26 PM

Post #1 of 6 (2182 views)
Permalink

SPF Queston

Hi,

ive setup my SPF record as the following "v=spf1 ip4:57.67.145.140
-all" for mydomain myxxxxdomain.com
i have also implemented SPF filtering using
postfix-policyd-spf-perl, when I do a test from a relay server i
create on my laptop,
my postfix mailserver rejects the mail with the following message
"Remote server replied: 554 5.7.1 <WernerDeKock [at] myxxxxdomain>:
Recipient address rejected:" --- But I still recieve the the NDR, I
thought SPF would stop that?

Thanks,

Regards,

Ilo

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

scott at kitterman

Jan 8, 2009, 3:25 AM

Post #2 of 6 (2115 views)
Permalink

Re: SPF Queston [In reply to]

On Thu, 8 Jan 2009 09:26:59 +0200 "Ilo Lorusso" <sneak147 [at] gmail> wrote:
>Hi,
>
>ive setup my SPF record as the following "v=spf1 ip4:57.67.145.140
>-all" for mydomain myxxxxdomain.com
>i have also implemented SPF filtering using
>postfix-policyd-spf-perl, when I do a test from a relay server i
>create on my laptop,
>my postfix mailserver rejects the mail with the following message
>"Remote server replied: 554 5.7.1 <WernerDeKock [at] myxxxxdomain>:
>Recipient address rejected:" --- But I still recieve the the NDR, I
>thought SPF would stop that?
>
It's a rejection, not a bounce. Note it says "Remote server ....". That's
generated by your test server, not the one where you are doing the SPF
checks.

Scott K

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

sneak147 at gmail

Jan 8, 2009, 5:59 AM

Post #3 of 6 (2100 views)
Permalink

Re: SPF Queston [In reply to]

yes that reject is fine...

But ...

I get a mail after ..

===

From: mailer-daemon [at] SNEAK
[mailto:mailer-daemon [at] SNEAK]
Sent: 08 January 2009 08:39 AM
To: Werner De Kock (SITA)
Subject: Undeliverable: Test

Your message did not reach some or all of the intended recipients.

Sent: Thu, 8 Jan 2009 08:38:51 +0200
Subject: Test

The following recipient(s) could not be reached:

WernerDeKock [at] flysaa
Error Type: SMTP
Remote server (57.67.145.234) issued an error.
hMailServer sent: RCPT TO:<WernerDeKock [at] flysaa>
Remote server replied: 554 5.7.1 <WernerDeKock [at] flysaa>:
Recipient address rejected: Please see
http://www.openspf.org/why.html?sender=WernerDeKock%40flysaa.com&ip=41.2
0.60.34&receiver=scanjia0z05.ipnetwork.co.za

On Thu, Jan 8, 2009 at 1:25 PM, Scott Kitterman <scott [at] kitterman> wrote:
> On Thu, 8 Jan 2009 09:26:59 +0200 "Ilo Lorusso" <sneak147 [at] gmail> wrote:
>>Hi,
>>
>>ive setup my SPF record as the following "v=spf1 ip4:57.67.145.140
>>-all" for mydomain myxxxxdomain.com
>>i have also implemented SPF filtering using
>>postfix-policyd-spf-perl, when I do a test from a relay server i
>>create on my laptop,
>>my postfix mailserver rejects the mail with the following message
>>"Remote server replied: 554 5.7.1 <WernerDeKock [at] myxxxxdomain>:
>>Recipient address rejected:" --- But I still recieve the the NDR, I
>>thought SPF would stop that?
>>
> It's a rejection, not a bounce. Note it says "Remote server ....". That's
> generated by your test server, not the one where you are doing the SPF
> checks.
>
> Scott K
>
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.org
> Modify Your Subscription: http://www.listbox.com/member/
> Archives: https://www.listbox.com/member/archive/1020/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/1020/
> Powered by Listbox: http://www.listbox.com
>

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

rob.macgregor at gmail

Jan 8, 2009, 6:37 AM

Post #4 of 6 (2095 views)
Permalink

Re: SPF Queston [In reply to]

On Thu, Jan 8, 2009 at 13:59, Ilo Lorusso <sneak147 [at] gmail> wrote:
> yes that reject is fine...
>
> But ...
>
> I get a mail after ..
>
> ===
>
> From: mailer-daemon [at] SNEAK
> [mailto:mailer-daemon [at] SNEAK]
> Sent: 08 January 2009 08:39 AM
> To: Werner De Kock (SITA)
> Subject: Undeliverable: Test
>
> Your message did not reach some or all of the intended recipients.
>
> Sent: Thu, 8 Jan 2009 08:38:51 +0200
> Subject: Test
>
> The following recipient(s) could not be reached:

Yes, your mail server (SNEAK.ipnetwork.co.za) generated that NDR.
There's not really anything you can do about that, beyond turning off
NDRs on your test server ;)

--
Please keep list traffic on the list.

Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

sneak147 at gmail

Jan 8, 2009, 10:04 PM

Post #5 of 6 (2096 views)
Permalink

Re: SPF Queston [In reply to]

Okay .. Hope I dont get flooded with NDR's in the real world..

anyway

if I want to add multle ip4 address to my SPF statement which is currently

"v=spf1 ip4:57.67.145.140 -all"

would the below work?

"v=spf1 ip4:57.67.145.140 ip4:57.67.145.139 -all"

On Thu, Jan 8, 2009 at 4:37 PM, Rob MacGregor <rob.macgregor [at] gmail> wrote:
> On Thu, Jan 8, 2009 at 13:59, Ilo Lorusso <sneak147 [at] gmail> wrote:
>> yes that reject is fine...
>>
>> But ...
>>
>> I get a mail after ..
>>
>> ===
>>
>> From: mailer-daemon [at] SNEAK
>> [mailto:mailer-daemon [at] SNEAK]
>> Sent: 08 January 2009 08:39 AM
>> To: Werner De Kock (SITA)
>> Subject: Undeliverable: Test
>>
>> Your message did not reach some or all of the intended recipients.
>>
>> Sent: Thu, 8 Jan 2009 08:38:51 +0200
>> Subject: Test
>>
>> The following recipient(s) could not be reached:
>
> Yes, your mail server (SNEAK.ipnetwork.co.za) generated that NDR.
> There's not really anything you can do about that, beyond turning off
> NDRs on your test server ;)
>
> --
> Please keep list traffic on the list.
>
> Rob MacGregor
> Whoever fights monsters should see to it that in the process he
> doesn't become a monster. Friedrich Nietzsche
>
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.org
> Modify Your Subscription: http://www.listbox.com/member/
> Archives: https://www.listbox.com/member/archive/1020/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/1020/
> Powered by Listbox: http://www.listbox.com
>

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

scott at kitterman

Jan 8, 2009, 11:18 PM

Post #6 of 6 (2088 views)
Permalink

Re: SPF Queston [In reply to]

Yes.

Scott K

...... Original Message .......
On Fri, 9 Jan 2009 08:04:50 +0200 "Ilo Lorusso" <sneak147 [at] gmail> wrote:
>Okay .. Hope I dont get flooded with NDR's in the real world..
>
>anyway
>
>if I want to add multle ip4 address to my SPF statement which is currently
>
>"v=spf1 ip4:57.67.145.140 -all"
>
>would the below work?
>
>"v=spf1 ip4:57.67.145.140 ip4:57.67.145.139 -all"
>
>
>
>On Thu, Jan 8, 2009 at 4:37 PM, Rob MacGregor <rob.macgregor [at] gmail>
wrote:
>> On Thu, Jan 8, 2009 at 13:59, Ilo Lorusso <sneak147 [at] gmail> wrote:
>>> yes that reject is fine...
>>>
>>> But ...
>>>
>>> I get a mail after ..
>>>
>>> ===
>>>
>>> From: mailer-daemon [at] SNEAK
>>> [mailto:mailer-daemon [at] SNEAK]
>>> Sent: 08 January 2009 08:39 AM
>>> To: Werner De Kock (SITA)
>>> Subject: Undeliverable: Test
>>>
>>> Your message did not reach some or all of the intended recipients.
>>>
>>> Sent: Thu, 8 Jan 2009 08:38:51 +0200
>>> Subject: Test
>>>
>>> The following recipient(s) could not be reached:
>>
>> Yes, your mail server (SNEAK.ipnetwork.co.za) generated that NDR.
>> There's not really anything you can do about that, beyond turning off
>> NDRs on your test server ;)
>>
>> --
>> Please keep list traffic on the list.
>>
>> Rob MacGregor
>> Whoever fights monsters should see to it that in the process he
>> doesn't become a monster. Friedrich Nietzsche
>>
>>
>> -------------------------------------------
>> Sender Policy Framework: http://www.openspf.org
>> Modify Your Subscription: http://www.listbox.com/member/
>> Archives: https://www.listbox.com/member/archive/1020/=now
>> RSS Feed: https://www.listbox.com/member/archive/rss/1020/
>> Powered by Listbox: http://www.listbox.com
>>
>
>
>-------------------------------------------
>Sender Policy Framework: http://www.openspf.org
>Modify Your Subscription: http://www.listbox.com/member/
>Archives: https://www.listbox.com/member/archive/1020/=now
>RSS Feed: https://www.listbox.com/member/archive/rss/1020/
>Powered by Listbox: http://www.listbox.com
>

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads