I've been digging a bit deeper into my reports, using the very nice tool at http://dmarcian.com I'm also getting these Hotmail SPF temperrors on the SPF record I have on the online.tdc.dk hostname. ( "v=spf1 a -all" ) So I guess we can't entirely blame "exists" in a SPF record for causing these temperrors.
Best regards Henrik Schack On Thu, Dec 20, 2012 at 6:22 AM, Henrik Schack <[email protected]> wrote: > Ok, I wasn't aware about this Hotmail pick and choose approach to the SPF > specification. > Kinda hard to make things work if you can't trust the SPF testing tools > available on the Internet :-( > Is this documented somewhere ? > > Guess I just got myself a puzzle, I didn't create an "exists" based SPF > record just for the fun, but because my company uses a lot of different > single mailserver ip's > Is there any known limits to the amount of nesting allowed when using the > include statement in SPF records ? > > Best regards > Henrik Schack > > > > > On Thu, Dec 20, 2012 at 3:52 AM, Franck Martin <[email protected]>wrote: > >> yes, do not use exists in your SPF record if you want SPF to work with >> hotmail (and may be others). >> >> From: Roland Turner <[email protected]> >> Date: Wednesday, December 19, 2012 5:16 PM >> To: Tim Draegen <[email protected]> >> Cc: "[email protected]" <[email protected]> >> Subject: Re: [dmarc-discuss] [ALERT] Re: Many SPF temperrors the last >> few days >> >> Oh, I didn't think to actually look at the record... Medium/large >> receivers are likely ignore exists: specifications because they don't query >> SPF at SMTP time, they use a pre-crawled copy of the relevant DNS records. >> >> Note that the only problem that exists: uniquely solved (being able to >> find out who is sending email claiming to be from your domain) is now part >> of what DMARC does anyway. >> >> - Roland >> >> >> >> On 19/12/2012 22:18, Tim Draegen wrote: >> >> Henrik, I may be misremembering this, but there may be issues with the >> exists mechanism and hotmail. If you can, you might try to remove your >> exists: check for a few days to see if your data changes. >> >> =- Tim >> >> >> On Dec 19, 2012, at 5:16 AM, Henrik Schack <[email protected]> wrote: >> >> No, it seems to be mostly email send directly to Hotmail. >> Best regards >> Henrik Schack >> >> >> >> On Wed, Dec 19, 2012 at 11:00 AM, Roland Turner < >> [email protected]> wrote: >> >>> Unable to retrieve, or SPF failure because it's reporting on messages >>> forwarded to a hotmail.com etc. address? >>> >>> It may be that these have been going on for some time but that the >>> sudden change that you're noticing is simply Microsoft turning this on. >>> >>> - Roland >>> >>> >>> >>> On 15/12/2012 04:47, Henrik Schack wrote: >>> >>> Ahh it seems to be Hotmail being unable to retrieve our SPF record :-( >>> >>> Best regards >>> Henrik Schack >>> >>> >>> >>> On Fri, Dec 14, 2012 at 8:23 PM, Henrik Schack <[email protected]>wrote: >>> >>>> Hi >>>> I have seen a lot of SPF temperrors in my DMARC reports the last few >>>> days, Am I the only one with this problem ? Domain in question is >>>> tdc.dk >>>> >>>> >>>> -- >>>> Best regards >>>> Henrik Schack >>>> IT-specialist >>>> TDC A/S >>>> >>> >>> >>> >>> -- >>> Venlig hilsen/Best regards >>> Henrik Schack >>> IT-specialist >>> TDC A/S, Online KundeCenter Privat, Udvikling >>> Teglholmsgade 3 >>> 0900 København C >>> Tlf + 45 6669 4631 >>> Mobil +45 4252 5569 >>> E-mail [email protected] >>> Web http://tdc.dk/ >>> >>> >>> >>> _______________________________________________ >>> dmarc-discuss mailing >>> [email protected]http://www.dmarc.org/mailman/listinfo/dmarc-discuss >>> >>> >>> >>> >>> NOTE: Participating in this list means you agree to the DMARC Note Well >>> terms (http://www.dmarc.org/note_well.html) >>> >>> >>> -- >>> Roland Turner | Director, Labs >>> TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693 >>> Mobile: +65 96700022 | Skype: roland.turner >>> [email protected] | http://www.trustsphere.com/ >>> >>> >> >> >> -- >> Venlig hilsen/Best regards >> Henrik Schack >> IT-specialist >> TDC A/S, Online KundeCenter Privat, Udvikling >> Teglholmsgade 3 >> 0900 København C >> Tlf + 45 6669 4631 >> Mobil +45 4252 5569 >> E-mail [email protected] >> Web http://tdc.dk/ >> >> _______________________________________________ >> dmarc-discuss mailing list >> [email protected] >> http://www.dmarc.org/mailman/listinfo/dmarc-discuss >> >> NOTE: Participating in this list means you agree to the DMARC Note Well >> terms (http://www.dmarc.org/note_well.html) >> >> >> >> >> _______________________________________________ >> dmarc-discuss mailing >> [email protected]http://www.dmarc.org/mailman/listinfo/dmarc-discuss >> >> >> >> >> NOTE: Participating in this list means you agree to the DMARC Note Well >> terms (http://www.dmarc.org/note_well.html) >> >> >> -- >> Roland Turner | Director, Labs >> TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693 >> Mobile: +65 96700022 | Skype: roland.turner >> [email protected] | http://www.trustsphere.com/ >> >> >> _______________________________________________ >> dmarc-discuss mailing list >> [email protected] >> http://www.dmarc.org/mailman/listinfo/dmarc-discuss >> >> NOTE: Participating in this list means you agree to the DMARC Note Well >> terms (http://www.dmarc.org/note_well.html) >> >> > > > -- > Venlig hilsen/Best regards > Henrik Schack > IT-specialist > TDC A/S, Online KundeCenter Privat, Udvikling > Teglholmsgade 3 > 0900 København C > Tlf + 45 6669 4631 > Mobil +45 4252 5569 > E-mail [email protected] > Web http://tdc.dk/ > -- Venlig hilsen/Best regards Henrik Schack IT-specialist TDC A/S, Online KundeCenter Privat, Udvikling Teglholmsgade 3 0900 København C Tlf + 45 6669 4631 Mobil +45 4252 5569 E-mail [email protected] Web http://tdc.dk/
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
