In looking into others, it looks like all of the false failures have multiple 
SPF records. andersen-const.com even has 3!

> set 'spfeValencePB' back to the default value '5'
I do not understand where 60 came from:
C:\assp>grep spfValencePB assp.cfg
spfValencePB:=50

Anyway, I updated it to the default value and we will see how that goes.

Thanks for looking at it for me.


...Tim


-----Original Message-----
From: Thomas Eckardt [mailto:[email protected]] 
Sent: Friday, September 19, 2014 8:09 AM
To: For Users of ASSP
Subject: Re: [Assp-user] SPF Failures

1. set 'spfeValencePB' back to the default value '5' or better to '0' - 
what was the idea behind to set it to 60 ?
2. the domain 'pacificlightingsystems.com' publishes two SPF-V1 records 
(IMHO this is wrong) - the sending IP 173.160.199.113 matches the second 
entry
3. check your setup - assp is reporting [UnknownLocalSender] for the 
domain  'pacificlightingsystems.com' 

exclude this domain from SPF
or override the spf-record for this domain to

v=spf1 mx a:glaze.pacificlightingsystems.com 
a:spotlight.pacificlightingsystems.com ~all

or better

v=spf1 ip4:173.160.199.113/32 ip4:173.160.199.114/32 ~all

or even better

v=spf1 ip4:173.160.199.113/32 ip4:173.160.199.114/32 -all

Thomas





Von:    Tim Evans <[email protected]>
An:     For Users of ASSP <[email protected]>
Datum:  19.09.2014 16:38
Betreff:        Re: [Assp-user] SPF Failures



Here are two. There have been others, but we do a lot of business with 
this company so this is one I easily remember. I can get more if that 
would help.

Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> info: found message size announcement: 
19.07 kByte
Sep-17-14 10:07:02 73622-03566 [Worker_2] [UnknownLocalSender] 
173.160.199.113 <[email protected]> [scoring] (Invalid 
Local Sender '[email protected]')
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> Message-Score: added 20 (flValencePB) 
for InvalidLocalSender, total score for this message is now 20
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> PB-IP-Score for '173.160.199.113' is 
20, added 20 for InvalidLocalSender
Sep-17-14 10:07:02 73622-03566 [Worker_2] [Noprocessing] 173.160.199.113 
<[email protected]> to: [email protected] info: found 
valid MSGID signature in [In-Reply-To:] - accept mail
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> to: [email protected] Message-ID 
found: 
E9BF03AF02EC99458623BCBAD7395EC8483A5CE7@glaze.PacificLightingSystems.local
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> to: [email protected] [scoring] SPF: 
permerror ip=173.160.199.113 [email protected] 
helo=glaze.pacificlightingsystems.com
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> to: [email protected] Message-Score: 
added 40 (spfeValencePB)for SPF permerror, total score for this message is 
now 60
Sep-17-14 10:07:02 73622-03566 [Worker_2] [MessageLimit] 173.160.199.113 
<[email protected]> to: [email protected] [spam found] 
(MessageScore 60, limit 45) [RE Amazon Controls mock up] -> 
c:/assp/discarded/3566--929914.eml;
Sep-17-14 10:07:02 73622-03566 [Worker_2] 173.160.199.113 
<[email protected]> to: [email protected] [SMTP Error] 554 
5.7.1 Mail appears to be unsolicited -- send error reports to 
[email protected]


Sep-17-14 09:23:47 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> info: found message size announcement: 
9.19 kByte
Sep-17-14 09:23:47 71027-06894 [Worker_4] [UnknownLocalSender] 
173.160.199.113 <[email protected]> [scoring] (Invalid 
Local Sender '[email protected]')
Sep-17-14 09:23:47 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> Message-Score: added 20 (flValencePB) 
for InvalidLocalSender, total score for this message is now 20
Sep-17-14 09:23:47 71027-06894 [Worker_4] [Noprocessing] 173.160.199.113 
<[email protected]> to: [email protected] info: found 
valid MSGID signature in [References:] - accept mail
Sep-17-14 09:23:47 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> to: [email protected] Message-ID 
found: 
6C9BBD35E9796F45B1D52894183874A547903C6E@glaze.PacificLightingSystems.local
Sep-17-14 09:23:48 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> to: [email protected] [scoring] SPF: 
permerror ip=173.160.199.113 [email protected] 
helo=glaze.pacificlightingsystems.com
Sep-17-14 09:23:48 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> to: [email protected] Message-Score: 
added 40 (spfeValencePB) for SPF permerror, total score for this message 
is now 60
Sep-17-14 09:23:48 71027-06894 [Worker_4] [MessageLimit] 173.160.199.113 
<[email protected]> to: [email protected] [spam found] 
(MessageScore 60, limit 45) [RE Cooper Monaco Fixture Warranty] -> 
c:/assp/discarded/6894--929669.eml;
Sep-17-14 09:23:48 71027-06894 [Worker_4] 173.160.199.113 
<[email protected]> to: [email protected] [SMTP Error] 554 
5.7.1 Mail appears to be unsolicited -- send error reports to 
[email protected]

...Tim


-----Original Message-----
From: Thomas Eckardt [mailto:[email protected]] 
Sent: Friday, September 19, 2014 12:07 AM
To: For Users of ASSP
Subject: Re: [Assp-user] SPF Failures

>I'm seeing a lot of SPF failures recently,

show the loglines

Thomas





Von:    Tim Evans <[email protected]>
An:     "[email protected]" 
<[email protected]>
Datum:  18.09.2014 21:24
Betreff:        [Assp-user] SPF Failures



I'm seeing a lot of SPF failures recently, and investigating the details I 

find some are incorrect - the email comes from a valid system listed in 
the SPF record. Has anyone else seen anything like this or have any ideas 
what the problem may be?

I'm running assp 2.4.3(14258) on perl v5.16.3 and Windows Server 
2008R2SP1. I've got Mail::SPF v2.007 and Mail::SPF::Query v1.999001, which 

both look like the current recommended modules.

...Tim

------------------------------------------------------------------------------
Slashdot TV.  Video for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk


_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user





DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 


individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Slashdot TV.  Video for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
Slashdot TV.  Video for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user





DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Slashdot TV.  Video for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
Slashdot TV.  Video for Nerds.  Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to