Sorry again if this is yet another generic SPF question but I guess it would still be related to my courier config. I'm seeing these messages being blocked and I'm not sure why, an example...
Jan 25 10:33:19 mail courieresmtpd: error, relay=::ffff:216.82.241.83, from=<[EMAIL PROTECTED]>: 517 SPF fail [EMAIL PROTECTED]: Address does not pass the Sender Policy Framework # dig +short txt xxxxx.com.au xxxxx.com.au. TXT "v=spf1 +a:mx2.xxxxx.com.au +a:mx1.xxxxx.com.au include:spf.messagelabs.com -all" so they use a messagelabs.com cluster and 216.82.241.83 is returned from a lookup of the MX for this domain (in the ADDITIONAL SECTION section) which I presume would be returned as part of include:spf.messagelabs.com part ? The IP of these 2 are overlayed over their ns1/ns2 nameservers so they are wrong, but the include: part should be right ? a:mx2.xxxxx.com.au +a:mx1.xxxxx.com.au # dig mx xxxxx.com.au. xxxxx.com.au. MX 10 cluster9.us.messagelabs.com. xxxxx.com.au. MX 20 cluster9a.us.messagelabs.com. ;; ADDITIONAL SECTION: cluster9.us.messagelabs.com. 541 IN A 216.82.249.51 cluster9.us.messagelabs.com. 541 IN A 216.82.254.3 cluster9.us.messagelabs.com. 541 IN A 216.82.254.35 cluster9.us.messagelabs.com. 541 IN A 216.82.254.51 cluster9.us.messagelabs.com. 541 IN A 216.82.241.83 <- cluster9.us.messagelabs.com. 541 IN A 216.82.249.3 cluster9.us.messagelabs.com. 541 IN A 216.82.249.19 cluster9.us.messagelabs.com. 541 IN A 216.82.249.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.51 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.3 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.35 cluster9a.us.messagelabs.com. 717 IN A 216.82.254.51 cluster9a.us.messagelabs.com. 717 IN A 216.82.241.83 cluster9a.us.messagelabs.com. 717 IN A 216.82.248.44 cluster9a.us.messagelabs.com. 717 IN A 216.82.248.45 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.3 cluster9a.us.messagelabs.com. 717 IN A 216.82.249.19 # grep SPF /etc/courier/bofh opt BOFHSPFHELO=pass,unknown,error,none,neutral opt BOFHSPFMAILFROM=pass,unknown,error,none,neutral opt BOFHSPFTRUSTME=1 --markc ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
