Ok, I wasn't aware about this Hotmail pick and choose approach to the SPF
specification.
Kinda hard to make things work if you can't trust the SPF testing tools
available on the Internet :-(
Is this documented somewhere ?

Guess I just got myself a puzzle, I didn't create an "exists" based SPF
record just for the fun, but because my company uses a lot of different
single mailserver ip's
Is there any known limits to the amount of nesting allowed when using the
include statement in SPF records ?

Best regards
Henrik Schack




On Thu, Dec 20, 2012 at 3:52 AM, Franck Martin <[email protected]> wrote:

>  yes, do not use exists in your SPF record if you want SPF to work with
> hotmail (and may be others).
>
>   From: Roland Turner <[email protected]>
> Date: Wednesday, December 19, 2012 5:16 PM
> To: Tim Draegen <[email protected]>
> Cc: "[email protected]" <[email protected]>
> Subject: Re: [dmarc-discuss] [ALERT] Re: Many SPF temperrors the last few
> days
>
>  Oh, I didn't think to actually look at the record... Medium/large
> receivers are likely ignore exists: specifications because they don't query
> SPF at SMTP time, they use a pre-crawled copy of the relevant DNS records.
>
> Note that the only problem that exists: uniquely solved (being able to
> find out who is sending email claiming to be from your domain) is now part
> of what DMARC does anyway.
>
> - Roland
>
>
>
> On 19/12/2012 22:18, Tim Draegen wrote:
>
> Henrik, I may be misremembering this, but there may be issues with the
> exists mechanism and hotmail.  If you can, you might try to remove your
> exists: check for a few days to see if your data changes.
>
>  =- Tim
>
>
>  On Dec 19, 2012, at 5:16 AM, Henrik Schack <[email protected]> wrote:
>
> No, it seems to be mostly email send directly to Hotmail.
> Best regards
> Henrik Schack
>
>
>
> On Wed, Dec 19, 2012 at 11:00 AM, Roland Turner <
> [email protected]> wrote:
>
>> Unable to retrieve, or SPF failure because it's reporting on messages
>> forwarded to a hotmail.com etc. address?
>>
>> It may be that these have been going on for some time but that the sudden
>> change that you're noticing is simply Microsoft turning this on.
>>
>> - Roland
>>
>>
>>
>> On 15/12/2012 04:47, Henrik Schack wrote:
>>
>>  Ahh it seems to be Hotmail being unable to retrieve our SPF record :-(
>>
>>  Best regards
>> Henrik Schack
>>
>>
>>
>> On Fri, Dec 14, 2012 at 8:23 PM, Henrik Schack <[email protected]>wrote:
>>
>>> Hi
>>> I have seen a lot of SPF temperrors in my DMARC reports the last few
>>> days, Am I the only one with this problem ? Domain in question is tdc.dk
>>>
>>>
>>>  --
>>> Best regards
>>> Henrik Schack
>>> IT-specialist
>>> TDC A/S
>>>
>>
>>
>>
>>  --
>> Venlig hilsen/Best regards
>> Henrik Schack
>> IT-specialist
>> TDC A/S, Online KundeCenter Privat, Udvikling
>> Teglholmsgade 3
>> 0900 København C
>> Tlf + 45 6669 4631
>> Mobil +45 4252 5569
>> E-mail [email protected]
>> Web http://tdc.dk/
>>
>>
>>
>>   _______________________________________________
>> dmarc-discuss mailing 
>> [email protected]http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>>
>>
>>
>> NOTE: Participating in this list means you agree to the DMARC Note Well 
>> terms (http://www.dmarc.org/note_well.html)
>>
>>
>> --
>>   Roland Turner | Director, Labs
>>   TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693
>>   Mobile: +65 96700022 | Skype: roland.turner
>>   [email protected] | http://www.trustsphere.com/
>>
>>
>
>
>  --
> Venlig hilsen/Best regards
> Henrik Schack
> IT-specialist
> TDC A/S, Online KundeCenter Privat, Udvikling
> Teglholmsgade 3
> 0900 København C
> Tlf + 45 6669 4631
> Mobil +45 4252 5569
> E-mail [email protected]
> Web http://tdc.dk/
>
>  _______________________________________________
> dmarc-discuss mailing list
> [email protected]
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
>
>
>
> _______________________________________________
> dmarc-discuss mailing 
> [email protected]http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
>
>
> NOTE: Participating in this list means you agree to the DMARC Note Well terms 
> (http://www.dmarc.org/note_well.html)
>
>
> --
>   Roland Turner | Director, Labs
>   TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693
>   Mobile: +65 96700022 | Skype: roland.turner
>   [email protected] | http://www.trustsphere.com/
>
>
> _______________________________________________
> dmarc-discuss mailing list
> [email protected]
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>
> NOTE: Participating in this list means you agree to the DMARC Note Well
> terms (http://www.dmarc.org/note_well.html)
>
>


-- 
Venlig hilsen/Best regards
Henrik Schack
IT-specialist
TDC A/S, Online KundeCenter Privat, Udvikling
Teglholmsgade 3
0900 København C
Tlf + 45 6669 4631
Mobil +45 4252 5569
E-mail [email protected]
Web http://tdc.dk/
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to