On 5/16/24 8:11 AM, Peter Potvin via NANOG wrote:
Appears there’s no SPF record at all now for nanog.org
<http://nanog.org>, which is not ideal…
Since probably 99% of the mail from NANOG is through this list, it
hardly matters since SPF will always fail. What is more important is
that they resign with DKIM so that receivers can use that identity. SPF
is for the most part belt and suspenders.
Mike
Kind regards,
Peter Potvin
On Thu, May 16, 2024 at 02:59 Bjørn Mork <bj...@mork.no> wrote:
"Scott Q." <qm...@top-consulting.net> writes:
> Anyone else getting SPF failures on all messages sent to the list
> ?
>
> I see them all originating from 50.31.151.76 but nanog.org
<http://nanog.org>'s SPF
> record doesn't list that as allowed.
I see the same. nanog.org <http://nanog.org> mail is originated from
2001:1838:2001:8:0:0:0:20 or 50.31.151.76, and the SPF record is
currently
"v=spf1 a include:_spf.google.com <http://spf.google.com> ~all"
Neither of those are Google addresses so it's a soft fail.
Bjørn
