Re[2]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Pete McNeil
On Monday, September 1, 2008, 10:46:12 PM, Andy wrote:

(Despite what Pete said, your AS> SPF syntax is perfectly valid and
quite usual.)

Thanks for that-- I made a comparison to what I got from dig with what
I got from the wizard and assumed the differences might be errors.

I've reacquainted myself with the SPF syntax and understand my errors
now. The record is clearly valid.

_M




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Andy Schmidt
I checked your 4 DNS servers. dns2 is down, but the other 3 all returned the
same, valid SPF record. (Despite what Pete said, your SPF syntax is
perfectly valid and quite usual.)

Based on what you posted, DNSSTUFF contacted your ns1.cefib.com for the TXT
record without success. May have been a temporary problem?

Do you actually have any MAIL problems related to SPF? What you are
reporting here, doesn't seem to be an SPF problem, but rather a DNS problem!

You can always use one of the email based record tester on
http://www.openspf.org/Tools to confirm that your SPF record is recognized
AND handled correctly by third party servers.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Monday, September 01, 2008 7:16 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] SPF Issue

Here is what i get from DNSSTUFF
Not sure what else to do to find out what is going on


How I am searching:

Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got 
referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]: 
Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]: 
Reports that no SPF records exist. [took 301 ms] Response: No SPF records 
exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an 
authoritative nameserver for cefib.com.) says that there are no SPF records 
for cefib.com. The E-mail address in charge of the cefib.com. zone is: 
[EMAIL PROTECTED]
There is no need to refresh the page -- to see the DNS traversal, to make 
sure that all DNS servers are reporting the same results, you can Click 
Here. Note that these results are obtained in real-time, meaning that these 
are not cached results. These results are what DNS resolvers all over the 
world will see right now (unless they have cached information).





- Original Message - 
From: "Andy Schmidt" <[EMAIL PROTECTED]>
To: 
Sent: Monday, September 01, 2008 12:41 PM
Subject: RE: [Declude.JunkMail] SPF Issue


> What is the issue? What error message? Was it bounced mail? What did the 
> NDR
> say? I could be a recipient trying to forward mail to another server, or 
> an
> end-user trying to send email from home using their local ISP... etc.
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
> Sent: Sunday, August 31, 2008 10:18 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] SPF Issue
>
> Hi all
>
> I have som SPF issues
> It was working fine some times back
> I use Mixrosoft dns
> I have
> (same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
> mailText   v=spf1 mx ip4:217.64.107.106 -all
>
> What is wrong with above ?
>
> TIA
>
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re[3]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Sanford Whiteman
> The mx should not be naked.

Actually,  naked  mx  mechanism  is  fine.  So is -all (deny-all being
preferable  to  anything  looser). The cefib.com TXT record is a valid
SPF record.

The  problem is likely to be an NXDOMAIN received by DNSStuff, perhaps
due to routing problems. Other remote tests such as Men and Mice's DIG
online work fine.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re[2]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Pete McNeil
Ooops.

I take that last post back I found something else looking more
closely:

;; ANSWER SECTION:
cefib.com.  3540IN  TXT "v=spf1 mx ip4:217.64.107.106 
-all"

The mx should not be naked.

Presumably what you wanted was this:

"v=spf1 mx:cefib.com ip4:217.64.107.106 ~all"

Hope this helps,

_M

On Monday, September 1, 2008, 7:15:35 PM, Serge wrote:

S> Here is what i get from DNSSTUFF
S> Not sure what else to do to find out what is going on


S> How I am searching:

S> Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got
S> referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
S> Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]:
S> Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
S> Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]:
S> Reports that no SPF records exist. [took 301 ms] Response: No SPF records
S> exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an
S> authoritative nameserver for cefib.com.) says that there are no SPF records
S> for cefib.com. The E-mail address in charge of the cefib.com. zone is:
S> [EMAIL PROTECTED]
S> There is no need to refresh the page -- to see the DNS traversal, to make
S> sure that all DNS servers are reporting the same results, you can Click
S> Here. Note that these results are obtained in real-time, meaning that these
S> are not cached results. These results are what DNS resolvers all over the
S> world will see right now (unless they have cached information).





S> - Original Message - 
S> From: "Andy Schmidt" <[EMAIL PROTECTED]>
S> To: 
S> Sent: Monday, September 01, 2008 12:41 PM
S> Subject: RE: [Declude.JunkMail] SPF Issue


>> What is the issue? What error message? Was it bounced mail? What did the 
>> NDR
>> say? I could be a recipient trying to forward mail to another server, or 
>> an
>> end-user trying to send email from home using their local ISP... etc.
>>
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
>> Sent: Sunday, August 31, 2008 10:18 PM
>> To: declude.junkmail@declude.com
>> Subject: [Declude.JunkMail] SPF Issue
>>
>> Hi all
>>
>> I have som SPF issues
>> It was working fine some times back
>> I use Mixrosoft dns
>> I have
>> (same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
>> mailText   v=spf1 mx ip4:217.64.107.106 -all
>>
>> What is wrong with above ?
>>
>> TIA
>>
>>
>>
>>
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>>
>>
>>
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>>
>> 




S> ---
S> This E-mail came from the Declude.JunkMail mailing list.  To
S> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
S> type "unsubscribe Declude.JunkMail".  The archives can be found
S> at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re[2]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Pete McNeil
It's a tiny thing - but it might matter:

When I dig for your spf record

dig @ns1.cefib.com cefib.com -t txt

I get:

;; ANSWER SECTION:
cefib.com.  3540IN  TXT "v=spf1 mx ip4:217.64.107.106 
-all"

On the surface it looks correct, but the -all should be ~all

That is - it should be a tilde not a dash.

Seems like a little thing, but that's also the only thing that doesn't
look right when compared to what I get approximating this at
openspf.org.

Hope this helps,

_M


On Monday, September 1, 2008, 7:15:35 PM, Serge wrote:

S> Here is what i get from DNSSTUFF
S> Not sure what else to do to find out what is going on


S> How I am searching:

S> Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got
S> referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
S> Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]:
S> Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
S> Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]:
S> Reports that no SPF records exist. [took 301 ms] Response: No SPF records
S> exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an
S> authoritative nameserver for cefib.com.) says that there are no SPF records
S> for cefib.com. The E-mail address in charge of the cefib.com. zone is:
S> [EMAIL PROTECTED]
S> There is no need to refresh the page -- to see the DNS traversal, to make
S> sure that all DNS servers are reporting the same results, you can Click
S> Here. Note that these results are obtained in real-time, meaning that these
S> are not cached results. These results are what DNS resolvers all over the
S> world will see right now (unless they have cached information).





S> - Original Message - 
S> From: "Andy Schmidt" <[EMAIL PROTECTED]>
S> To: 
S> Sent: Monday, September 01, 2008 12:41 PM
S> Subject: RE: [Declude.JunkMail] SPF Issue


>> What is the issue? What error message? Was it bounced mail? What did the 
>> NDR
>> say? I could be a recipient trying to forward mail to another server, or 
>> an
>> end-user trying to send email from home using their local ISP... etc.
>>
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
>> Sent: Sunday, August 31, 2008 10:18 PM
>> To: declude.junkmail@declude.com
>> Subject: [Declude.JunkMail] SPF Issue
>>
>> Hi all
>>
>> I have som SPF issues
>> It was working fine some times back
>> I use Mixrosoft dns
>> I have
>> (same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
>> mailText   v=spf1 mx ip4:217.64.107.106 -all
>>
>> What is wrong with above ?
>>
>> TIA
>>
>>
>>
>>
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>>
>>
>>
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>>
>> 




S> ---
S> This E-mail came from the Declude.JunkMail mailing list.  To
S> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
S> type "unsubscribe Declude.JunkMail".  The archives can be found
S> at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Serge

Here is what i get from DNSSTUFF
Not sure what else to do to find out what is going on


How I am searching:

Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got 
referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]: 
Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]: 
Reports that no SPF records exist. [took 301 ms] Response: No SPF records 
exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an 
authoritative nameserver for cefib.com.) says that there are no SPF records 
for cefib.com. The E-mail address in charge of the cefib.com. zone is: 
[EMAIL PROTECTED]
There is no need to refresh the page -- to see the DNS traversal, to make 
sure that all DNS servers are reporting the same results, you can Click 
Here. Note that these results are obtained in real-time, meaning that these 
are not cached results. These results are what DNS resolvers all over the 
world will see right now (unless they have cached information).






- Original Message - 
From: "Andy Schmidt" <[EMAIL PROTECTED]>

To: 
Sent: Monday, September 01, 2008 12:41 PM
Subject: RE: [Declude.JunkMail] SPF Issue


What is the issue? What error message? Was it bounced mail? What did the 
NDR
say? I could be a recipient trying to forward mail to another server, or 
an

end-user trying to send email from home using their local ISP... etc.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Sunday, August 31, 2008 10:18 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SPF Issue

Hi all

I have som SPF issues
It was working fine some times back
I use Mixrosoft dns
I have
(same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
mailText   v=spf1 mx ip4:217.64.107.106 -all

What is wrong with above ?

TIA





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.







---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Andy Schmidt
What is the issue? What error message? Was it bounced mail? What did the NDR
say? I could be a recipient trying to forward mail to another server, or an
end-user trying to send email from home using their local ISP... etc.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Sunday, August 31, 2008 10:18 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SPF Issue

Hi all

I have som SPF issues
It was working fine some times back
I use Mixrosoft dns
I have
(same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
mailText   v=spf1 mx ip4:217.64.107.106 -all

What is wrong with above ?

TIA





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.