Hi, thanks for all.
I verified all the suggestions, but everything is correctly. I don´t have
IPV6 and the DNS servers return the same results.
Today, i received this report from google:
<record>
<row>
<source_ip>201.62.46.25</source_ip>
<count>21</count>
.
.
.
<spf>
<domain>prodest.es.gov.br</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>201.62.46.25</source_ip>
<count>1</count>
.
.
.
<spf>
<domain>prodest.es.gov.br</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>201.62.46.25</source_ip>
<count>30</count>
.
.
.
<spf>
<domain>prodest.es.gov.br</domain>
<result>pass</result>
</spf>
</auth_results>
</record>
<record>
<row>
<source_ip>201.62.46.25</source_ip>
<count>7</count>
.
.
.
<spf>
<domain>prodest.es.gov.br</domain>
<result>fail</result>
</spf>
</auth_results>
</record>
...
This information is in one report aggregate, all this messages have passed
in DKIM verification, so this not impact me. But if it is not a error in
Google servers, it could be some miss configuration here.
The DMARC registes is : "v=DMARC1; p=reject; sp=none; pct=70; rua=mailto:
dm...@prodest.es.gov.br"
Like João Oliveirinha said, it is a minimum percentage of the email that
fails on SPF and only happen on google report's.
Best Regards,
Daniel Brito
On Mon, Sep 15, 2014 at 7:00 PM, João Oliveirinha <dmarc-discuss@dmarc.org>
wrote:
> I am also seeing some problems with SPF verification by google servers
> recently.
>
> The majority of cases are "fail" spf responses, but some are "permerror"s.
> Which is strange. I haven't changed my dns records in some time, and my dns
> provider is Cloudflare.
>
> Either way, this is only ~3% of the emails in the least week, for instance.
>
>
> --
>
> [image: Feedzai SA] <http://www.feedzai.com/>
>
> João Oliveirinha / Senior Data Scientist
> +351 91 322 43 52/ joao.oliveiri...@feedzai.com (PGP
> <http://pgp.mit.edu/pks/lookup?op=get&search=0xC0E505208B118765>)
>
> Feedzai SA Office: +351 211 985 635
> Edifício Atlantis, Av. João II, Lote 1.06.2.2, 1990-095 Lisboa, Portugal
> http://www.feedzai.com
>
> [image: Linkedin] <http://pt.linkedin.com/in/joliveirinha>
>
> On Mon, Sep 15, 2014 at 10:13 PM, Dave Warren via dmarc-discuss <
> dmarc-discuss@dmarc.org> wrote:
>
>> On 2014-09-15 13:55, Al Iverson via dmarc-discuss wrote:
>>
>>> First thing I would look at is, do all of your DNS servers reliably
>>> return the same results? If you have 3-4 DNS servers and one of them
>>> doesn't return the right info, this could conceivably cause what you
>>> are seeing.
>>>
>>
>> One other thought, beyond what Al said... Any chance you've started
>> delivering to Google via IPv6, but your SPF only covers your IPv4 IP space?
>>
>> --
>> Dave Warren
>> http://www.hireahit.com/
>> http://ca.linkedin.com/in/davejwarren
>>
>>
>>
>> _______________________________________________
>> dmarc-discuss mailing list
>> dmarc-discuss@dmarc.org
>> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>>
>> NOTE: Participating in this list means you agree to the DMARC Note Well
>> terms (http://www.dmarc.org/note_well.html)
>>
>
>
> _______________________________________________
> dmarc-discuss mailing list
> dmarc-discuss@dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
_______________________________________________
dmarc-discuss mailing list
dmarc-discuss@dmarc.org
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
