Re: [mailop] paypal.com issues

2021-05-20 Thread Paul Smith via mailop 

On 20/05/2021 15:40, joemailop--- via mailop wrote:

Maybe it was a temporary issue?

Right now I only see one entry -

dig paypal.com txt | findstr "spf"
paypal.com. 3444IN  TXT "v=spf1 include:pp._spf.paypal.com 
include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com 
include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all"


Yes, it looks OK now. I did check it earlier when I saw Javier's 
message, and I got the two SPF records as well


[C:\temp]dig txt paypal.com

; <<>> DiG 9.17.0 <<>> txt paypal.com
...
paypal.com. 3548    IN  TXT "MS=ms95960309"
paypal.com. 3548    IN  TXT "v=spf1 
include:pp._spf.paypal.com include:3ph1._spf.paypal.com 
include:3ph2._spf.paypal.com include:3ph3._sp

f.paypal.com include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all"
paypal.com. 3548    IN  TXT "v=spf1 
include:aspmx.pardot.com ~all"
paypal.com. 3548    IN  TXT 
"workplace-domain-verification=F7ezsH9uapvYDGd2VtPARy1qq9ymN6"

.

but now there's just the one


--
Paul
Paul Smith Computer Services
supp...@pscs.co.uk - 01484 855800


--


Paul Smith Computer Services
Tel: 01484 855800
Vat No: GB 685 6987 53

Sign up for news & updates at http://www.pscs.co.uk/go/subscribe
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] paypal.com issues

2021-05-20 Thread joemailop--- via mailop 
Maybe it was a temporary issue?

Right now I only see one entry - 

dig paypal.com txt | findstr "spf"
paypal.com. 3444IN  TXT "v=spf1 
include:pp._spf.paypal.com include:3ph1._spf.paypal.com 
include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com 
include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all"

-joe

On 5/20/2021 at 6:10 AM, "Javier Angulo via mailop"  wrote:
>
>Hi,
>
>I wonder if somebody is having problems with paypal.com on the 
>receiving 
>side (or maybe someone from paypal can help).
>
>We are rejecting what seems to be legit messages from paypal 
>employees 
>because:
>- They have a p=reject DMARC record
>- DKIM check fails (body has been altered)
>- paypal.com has 2 SPF records:
>
>$ dig txt paypal.com +short
>...
>"v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com 
>include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com 
>include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all"
>"v=spf1 include:aspmx.pardot.com ~all"
>
>So at least IMHO a single SPF record should be used.
>
>Cheers,
>Javier
>___
>mailop mailing list
>mailop@mailop.org
>https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] paypal.com issues

2021-05-20 Thread Javier Angulo via mailop 

Hi,

I wonder if somebody is having problems with paypal.com on the receiving 
side (or maybe someone from paypal can help).


We are rejecting what seems to be legit messages from paypal employees 
because:

- They have a p=reject DMARC record
- DKIM check fails (body has been altered)
- paypal.com has 2 SPF records:

$ dig txt paypal.com +short
...
"v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com 
include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com 
include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all"

"v=spf1 include:aspmx.pardot.com ~all"

So at least IMHO a single SPF record should be used.

Cheers,
Javier
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop