On 28.01.16 17:41, Mark Constable wrote: >Jan 21 15:49:18 s1 courieresmtpd: error, >relay=::ffff:136.147.176.7, >from=<bounce-4814_html-122269605-10348-7213380-5...@bounce.s7.exacttarget.com>: >517 SPF fail >bounce-4814_html-122269605-10348-7213380-5...@bounce.s7.exacttarget.com: >Address does not pass the Sender Policy Fr... > >~ dig txt bounce.s7.exacttarget.com >bounce.s7.exacttarget.com. 14399 IN TXT "spf2.0/pra >include:cust-senderid.exacttarget.com -all" >bounce.s7.exacttarget.com. 14399 IN TXT "v=spf1 >include:cust-spf.exacttarget.com -all" > >~ dig txt cust-senderid.exacttarget.com >cust-spf.exacttarget.com. 190 IN TXT "v=spf1 ip4:64.132.92.0/24 >ip4:64.132.88.0/23 ip4:66.231.80.0/20 ip4:68.232.192.0/20 ip4:199.122.120.0/21 >ip4:207.67.38.0/24 " "ip4:207.67.98.192/27 ip4:207.250.68.0/24 >ip4:209.43.22.0/28 ip4:198.245.80.0/20 ip4:136.147.128.0/20 >ip4:136.147.176.0/20 ip4:13.111.0.0/20 -all"
don't check for cust-senderid.exacttarget.com fro the "spf2.0/pra" - courier does not support SenderID - SenderID sucks. check the one from "v=spf1": % txt cust-spf.exacttarget.com cust-spf.exacttarget.com descriptive text "v=spf1 ip4:64.132.92.0/24 ip4:64.132.88.0/23 ip4:66.231.80.0/20 ip4:68.232.192.0/20 ip4:199.122.120.0/21 ip4:207.67.38.0/24 " "ip4:207.67.98.192/27 ip4:207.250.68.0/24 ip4:209.43.22.0/28 ip4:198.245.80.0/20 ip4:136.147.128.0/20 ip4:136.147.176.0/20 ip4:13.111.0.0/20 -all" >Is that 'ip4:207.67.38.0/24 " "ip4:207.67.98.192/27' part allowed in a SPF >record? it's DNS RR with multiple strings, it's allowed in the DNS, but must be supported by courier - as Sam said, version older than 0.74 can have problem. Which courier MTA version do you use? >~ dig bounce.s7.exacttarget.com >bounce.s7.exacttarget.com. 4753 IN A 66.231.91.54 > >~ dig -x 66.231.91.54 >54.91.231.66.in-addr.arpa. 8133 IN PTR mx-in-2.exacttarget.com. > >So is it possible courier is rejecting the mismatched forward and reverse >records >for the originating domain (but that would be nothing to do with SPF)? no, this is clearly SPF error; couries afaik does not support rejecting because of reverse DNS mismatch. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Spam = (S)tupid (P)eople's (A)dvertising (M)ethod ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 _______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
