Christopher Rüprich writes:

I just received a junk-mail with the following Received-SPF header:

Received-SPF: error (DNS MX lookup failed.?)
  SPF=MAILFROM;
  sender=ase...@gabelgelb.xyz;
  remoteip=::ffff:185.132.126.23;
  remotehost=;
  helo=gabelgelb.xyz;
  receiver=mail.con-data.net;


The domain gabelgelb.xyz has no mx-record and the following spf-record:
gabelgelb.xyz.          71      IN      TXT     "v=spf1 a mx ptr -all"

I believe the SPF-check should return 'fail' instead of 'error' in this
case.

The SPF check returns "error" to indicate the fact that the DNS lookup has failed. If you'd like, you can configure the "error" status as a mail rejection status. It's entirely up to you, how you want to handle DNS lookup failures.

But, of course, you understand that every DNS lookup failure will result in rejected mail. Even from IP addresses whose SPF check would otherwise pass, and from domains with no SPF records at all.

Attachment: pgpWESk8l1NPc.pgp
Description: PGP signature

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to