On 23/10/2020 23.42, John Levine wrote: > In article <c01919bd-a259-7d58-5be6-cfb950f69...@iki.fi> you write: >> When sending messages to a *.mail.protection.outlook.com host via IPv6, >> our mail host gets the following email status: >> >> #4.7.26 SMTP; 450 4.7.26 Service does not accept messages sent over IPv6 >> [2001:708:10:6004::22] unless they pass either SPF or DKIM validation >> (message >> not signed) (S825). [DB5EUR03FT043.eop-EUR03.prod.protection.outlook.com] > > FWIW, Gmail has had the same rule for a long time, all IPv6 mail must > be validated with SPF or DKIM, so you're better off fixing whatever is > wrong. > > Do you know what address it's trying to send mail from? It looks to me like > your SPF record allows 2001:708:10:6004::22 and ::14
That's just it: as I said in my original message, the mail in this case is coming from smtp.sdn.csc.fi [2001:708:10:6004::22]. I'm a bit at loss to what's wrong. Do they require SPF softfail instead of neutral, that is, replace "?all" with "~all" in the record? If that's it, pretty much a misuse of SPF, I'd say. -- /* * * Otto J. Makela <o...@iki.fi> * * * * * * * * * */ /* Phone: +358 40 765 5772, ICBM: N 60 10' E 24 55' */ /* Mail: Mechelininkatu 26 B 27, FI-00100 Helsinki */ /* * * Computers Rule 01001111 01001011 * * * * * * */ _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop