RSutton at filicebrown
Aug 20, 2009, 11:30 AM
Post #3 of 11
(1471 views)
Permalink
|
|
RE: Just set up SPF, does not seem to be working
[In reply to]
|
|
Hi Rob,
Thanks for the reply. I will remove the private range from the SPF
record. Here is the full unedited SPF record:
v=spf1 ip4:192.168.103.0/24 ip4:206.14.210.88 ip4:64.18.0.0/20mx
include:easydns.com ~all
The domain is h5marketing.com.
Inbound email goes through Postini directly to the Exchange server.
Before using Postini I used easydns, so I can remove that portion know I
supose.
So for the new SPF record it seems like this would work for me:
v=spf1 ip4:206.14.210.88 ip4:64.18.0.0/20mx -all
Do you agree?
Thanks,
Ryan
-----Original Message-----
From: Rob MacGregor [mailto:rob.macgregor [at] gmail]
Sent: Thursday, August 20, 2009 11:19 AM
To: spf-help [at] v2
Subject: Re: [spf-help] Just set up SPF, does not seem to be working
On Thu, Aug 20, 2009 at 17:51, Ryan Sutton<RSutton [at] filicebrown>
wrote:
> Hello,
>
> Looking for help with SPF, I think I have set it up incorrectly.
>
> Situation: I'm getting a heavy volume of spam where the From Sender is
> the same as the To Sender. I believe SPF should prevent this spam from
> getting through.
>
> My Setup: Exchange 2003 SP2 Sender ID Filtering enabled with public
> hosted DNS - easydns.com, also using Postini. I have created the
> following SPF record: v=spf1 ip4:192.168.103.0/24 ip4:206.14.xxx.xxx
> ip4:64.18.0.0/20mx include:easydns.com ~all
>
> I edited the public IP of my Exchange server. The /20 block is for
> Postini. Can anyone see something I am doing wrong here?
As covered in the FAQ - SenderID is NOT SPF.
Note that by using ~all you've said (as mentioned at
http://www.openspf.org/SPF_Record_Syntax) to accept, but mark
(SoftFail). If you want mail failing the SPF check to be rejected you
need to:
a) Use "-all"
b) Check SPF records at your MX hosts, configured to reject mail that
Fails
To comment on your SPF record we HAVE to know the real domain in
question, it's impossible to help based on false information. Note that
the SPF record should never use RFC1918 addresses, as your altered
record appears to.
Finally, do you send email through Postini, directly to your Exchange
server, or via EasyDNS?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
-------------------------------------------
Sender Policy Framework: http://www.openspf.org Modify Your
Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
***********************************************************
IRS Circular 230 Disclosure: As required by U.S. Treasury Regulations
governing tax practice, you are hereby advised that any written tax advice
contained herein was not written or intended to be used (and cannot be used)
by any taxpayer for the purpose of avoiding penalties that may be imposed
under the U.S. Internal Revenue Code.
***********************************************************
CONFIDENTIALITY NOTICE:
This electronic message may contain information that is confidential and/or
legally privileged. Any use, review, dissemination, distribution, or copying
of this transmission by anyone other than the intended recipient is strictly
prohibited. If you have received this message in error, please immediately
notify the sender and/or Filice Brown Eassa & McLeod LLP by telephone at
(510) 444-3131 and delete the original message. Thank you.
-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
|
