On 27/4/22 11:53, Daryl Tester wrote:
if the email origin does not have the SPF record set or the email is not singed.
$ host -t TXT bitchin100.com
bitchin100.com descriptive text "v=spf1 mx include:netblocks.dreamhost.com
include:relay.mailchannels.net -all"
Okay, dug into this a little further with the help of the logs from my mail
server.
The HELO greeting used is "lists.bitchin100.com", not "bitchin100.com", which
doesn't have
an SPF record.
$ python -m spf -v 64.90.62.202 m100-boun...@lists.bitchin100.com
pdx1-mailman01.dreamhost.com
top: lists.bitchin100.com "None"
result: ('none', 250, '') None
guessed: ('pass', 250, 'sender SPF authorized') a/24
Result's output should be what guessed's output is, but isn't. Also, the
"None" in the top line
should be the SPF record. Compare against if I fabricate the test to come from
bitchin100.com:
$ python -m spf -v 64.90.62.202 m100-boun...@bitchin100.com
pdx1-mailman01.dreamhost.com
top: bitchin100.com "v=spf1 mx include:netblocks.dreamhost.com
include:relay.mailchannels.net -all"
include: netblocks.dreamhost.com "v=spf1 ip4:66.33.192.0/19 ip4:205.196.208.0/20
ip4:64.111.96.0/19 ip4:208.97.128.0/18 ip4:208.113.128.0/17 ip4:67.205.0.0/18
ip4:75.119.192.0/19 ip4:69.163.128.0/17 ip4:173.236.128.0/17 ip4:64.90.32.0/19
ip4:64.90.62.0/24 ip4:69.163.136.0/24 ip6:2607:F298::/32 include:relay.mailchannels.net
~all"
result: ('pass', 250, 'sender SPF authorized') include:netblocks.dreamhost.com
John, tl;dr - copy the SPF TXT record from bitchin100.com to
lists.bitchin100.com. Completely
unsure if this resolves Google's issue or not, but it will improve the SPF side
of things.
Cheers,
--dt
