Vladimir, Thanks for that article. You did cover all of the issues I've seen to date... including one I saw just this morning for the first time!
An organization's SPF has: v=spf1 mx include:smtproutes.com include:smtpout.com ~all include:spf.protection.outlook.com -all include:spf.emailsignatures365.com -all They couldn't understand why their outlook email was having trouble :) So, I've re-enabled spf for JUST my email server host, using JUST its ip4 address. Makes sense... sometimes it needs to send bounce-o-grams. Pete On 12 Oct 2017 Vladimir Dubrovin via dmarc-d said... > >And this can be (and most probably is) invalid SPF configuration, >because mail1.iecc.com can be used in HELO. > >I've gathered most common SPF misconceptions in this article: > >https://hackernoon.com/myths-and-legends-of-spf-d17919a9e817 > > _______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)