9 messages in net.sourceforge.lists.courier-users[courier-users] SPF
FromSent OnAttachments
Mark ConstableJan 24, 2008 7:48 pm 
Alessandro VeselyJan 24, 2008 10:28 pm 
Alessandro VeselyJan 24, 2008 10:46 pm 
Mark ConstableJan 24, 2008 11:17 pm 
Alessandro VeselyJan 25, 2008 2:17 am 
Mark ConstableJan 25, 2008 2:56 am 
Alessandro VeselyJan 26, 2008 7:28 am 
Mark ConstableJan 28, 2008 6:35 pm 
Sam VarshavchikJan 28, 2008 7:54 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] SPFActions...
From:Mark Constable (mar@renta.net)
Date:Jan 24, 2008 7:48:50 pm
List:net.sourceforge.lists.courier-users

Sorry again if this is yet another generic SPF question but I guess it would still be related to my courier config. I'm seeing these messages being blocked and I'm not sure why, an example...

Jan 25 10:33:19 mail courieresmtpd: error, relay=::ffff:216.82.241.83, from=<card@xxxxx.com.au>: 517 SPF fail card@xxxxx.com.au: Address does not pass the Sender Policy Framework

# dig +short txt xxxxx.com.au xxxxx.com.au. TXT "v=spf1 +a:mx2.xxxxx.com.au +a:mx1.xxxxx.com.au
include:spf.messagelabs.com -all"

so they use a messagelabs.com cluster and 216.82.241.83 is returned from a lookup of the MX for this domain (in the ADDITIONAL SECTION section) which I presume would be returned as part of include:spf.messagelabs.com part ?

The IP of these 2 are overlayed over their ns1/ns2 nameservers so they are wrong, but the include: part should be right ?

a:mx2.xxxxx.com.au +a:mx1.xxxxx.com.au

# dig mx xxxxx.com.au. xxxxx.com.au. MX 10 cluster9.us.messagelabs.com. xxxxx.com.au. MX 20 cluster9a.us.messagelabs.com.

;; ADDITIONAL SECTION: cluster9.us.messagelabs.com. 541 IN A 216.82.249.51 cluster9.us.messagelabs.com. 541 IN A 216.82.254.3 cluster9.us.messagelabs.com. 541 IN A 216.82.254.35 cluster9.us.messagelabs.com. 541 IN A 216.82.254.51 cluster9.us.messagelabs.com. 541 IN A 216.82.241.83 <- cluster9.us.messagelabs.com. 541 IN A 216.82.249.3 cluster9.us.messagelabs.com. 541 IN A 216.82.249.19 cluster9.us.messagelabs.com. 541 IN A 216.82.249.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.51 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.3 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.51 cluster9a.us.messagelabs.com. 717 IN A 216.82.241.83 cluster9a.us.messagelabs.com. 717 IN A 216.82.248.44 cluster9a.us.messagelabs.com. 717 IN A 216.82.248.45 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.3 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.19

# grep SPF /etc/courier/bofh opt BOFHSPFHELO=pass,unknown,error,none,neutral opt BOFHSPFMAILFROM=pass,unknown,error,none,neutral opt BOFHSPFTRUSTME=1

--markc