this is the SPF record for dnb.com
dnb.com text =
"v=spf1 mx ip4:72.19.252.170 ip4:202.129.242.64/2
ip4:204.14.232.64/28 i
p4:204.14.234.64/28 mx:uscwygtw01.dnb.com mx:uscwygtw02.dnb.com
mx:uslitgtw01.dn
b.com mx:uslitgtw02.dnb.com include:alerts.wallst.com ~all"
look at the entry ip4:202.129.242.64/2 - which makes the IP range
192.0.0.0 - 255.255.255.255 valid for SPF
this range is too large - max is 8 Bit - and makes assp to set all SPF
results for this domain to faile
possibly this is a typo and it should be ip4:202.129.242.64/28
solution:
- contact the DNS master of the domain to change the record
- skip the SPF check for this domain
- use V2 and override the record
Thomas
Von: Doug Lytle <supp...@drdos.info>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>,
Datum: 27.11.2012 21:11
Betreff: [Assp-test] Issues with SPF
I seem to be having a problem with one specific vendor. Their domain is
dnb.com.
Email coming in is flagging their SPF as a SPAMMER SPF (New one to me).
Reviewing their SPF appears to be valid and passes the online SPF Query
tool. Could someone comment on it?
I've changed source and destination domain and the @ symbol to AT
Logs below, I'm currently running ASSP version 2.2.2(12313):
158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com at
least one removed privat entry found in whitelist (sender AT
DNB.com,receipient AT ourdomain.com) - mail is no longer whitelisted
[Whitelisted] 158.151.208.48 <sender AT DNB.com> to: receipient AT
ourdomain.com info: found valid MSGID signature in [References:] - accept
mail
158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com SPF:
found SPAMMER SPF record/mechanism 'mechanism 'mx' matched' for domain
dnb.com - SPF result is set to 'fail'
158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com
Message-Score: added 10 (spfValencePB) for SPF fail, total score for this
message is now 10
[SPF] 158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com
[spam found] (SPF fail) [RE Test Email] -> /assp/spam/13623--5033917.eml;
158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com [SMTP
Error] 554 5.7.1 failed SPF: dnb.com: 158.151.208.48 is authorized to use
'sender AT dnb.com' in 'mfrom' identity (mechanism 'mx' matched)
158.151.208.48 <sender AT DNB.com> to: receipient AT ourdomain.com [SMTP
Status] 451 4.7.1 Please try again later
Thanks,
Doug
--
--
Ben Franklin quote:
"Those who would give up Essential Liberty to purchase a little Temporary
Safety, deserve neither Liberty nor Safety."
------------------------------------------------------------------------------
Keep yourself connected to Go Parallel:
DESIGN Expert tips on starting your parallel project right.
http://goparallel.sourceforge.net
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Keep yourself connected to Go Parallel:
INSIGHTS What's next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
