I'm receiving reports of email failures from rackspace.com. Their SPF record is HUGE, but passes testing from mxtoolbox.com and kitterman.com testing tools, I've temporarily had to use SPF override to accept all mail from them. Is this a bug?
The logs are showing: 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> Message-Score: added -10 (tlsValencePB) for SSL-TLS-connection-OK, total score for this message is now -10 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED Whitelisted sender Domain: @rackspace.com 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED DKIM-Signature found 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED info: detected IP's on the mail routing way: 50.56.229.13, 216.32.180.54 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED info: detected source IP: 50.56.229.13 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED info: domain rackspace.com has published a DMARC record 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED SPF: found SPAMMER SPF record/mechanism 'mechanism 'ip4:192.237.132.24/31' matched' for domain rackspace.com - SPF result is set to 'fail' 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED Message-Score: added 10 (spfValencePB) for SPF fail, total score for this message is now 0 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] [SPF] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED [spam found] (SPF fail) [FW Associates Rackspace] -> /assp/spam/FW_TMP_Associates_Inc_Rackspace--4160149.eml; 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED [SMTP Error] 554 5.7.1 failed SPF: rackspace.com: 192.237.132.24 is authorized to use 'prvs=0369bdad92=redac...@rackspace.com' in 'mfrom' identity (mechanism 'ip4:192.237.132.24/31' matched) 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [SSL-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED finished message - received DATA size: 3.58 kByte - sent DATA size: 0 Byte 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [SSL-out] 192.237.132.24 <redac...@rackspace.com> to: leesa@REDACTED disconnected: session:7FB97C4C7410 192.237.132.24 - processing time 1 seconds Doug ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
