Mark Constable writes:
I can't quite work out why this particular example is failing an SPF check.Jan 27 10:49:46 s1 courieresmtpd: error, relay=::ffff:104.47.126.51, from=<recept...@xxxx.com.au>:517 SPF fail recept...@xxxx.com.au: Address does not pass the Sender Policy FrameworkThe IP is owned by M$ and it returns an outlook.com PTR... ~ dig +short -x 104.47.126.51 mail-pu1apc01on0051.outbound.protection.outlook.com.Is it at all possible the google-site-verification TXT RR is confusing the issue?~ dig +short txt xxxx.com.au "v=spf1 includes:spf.protection.outlook.com -all" "google-site-verification=IlCUVOxK5F8zXd5ATS9ffkVvBDS1ZkQJT-XXXXXXX"
Use the full dig command. Is this two separate TXT records, or one single TXT record with two strings.
If google-site-verification is a separate TXT record, it will definitely be ignored.
If it's the same string, the -all should cause SPF to fail in any case, if SPF validation reaches this far. Since there is no inteverning space, the parser will actually see "-allgoogle-site-verification..", which is garbage, and garbage is equivalent to -all anyway.
Is it possible that 104.47.126.51 is not part of includes:spf.protection.outlook.com ?Or is there something obvious I might be missing?
There are a bunch of nested includes here. Maybe one of them resulted in a stalled DNS lookup, and this is configured to be treated as a hard failure. The IP address looks fine to me.
pgps9PagaJox2.pgp
Description: PGP signature
------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
