Thanks for clarification. Sounds like it may be problematic for web applications using PHP mail() or similar (which defaults to using username@server for Return-Path rather than adjusting it with From, and rarely give the option to override it).
Anyway, fixed for me - thanks! -- Tomasz Chmielewski http://www.sslrack.com On Fri, 30 May 2014 20:45:37 -0700 Andrew Flury <[email protected]> wrote: > Hi Tomasz, > > As Tim suspected, these reports indicate an SPF alignment problem. > Hotmail is reporting that it’s doing SPF checks using > web2.virtall.com as the authority domain (typically the MAIL FROM / > envelope domain, but it could be the HELO/EHLO domain in the case of > bounces). Emails sent with From: header domains of ptraveler.com > need to use MAIL FROM domains (and HELO/EHLO domains for bounces) of > ptraveler.com or one of its subdomains in order to pass SPF from > DMARC’s perspective. > > Hope this helps. > > Andrew > > On May 30, 2014, at 17:21 PM, Tomasz Chmielewski via dmarc-discuss > <[email protected]> wrote: > > > Hi, > > > > I've attached a few XML reports. > > > > -- > > Tomasz Chmielewski > > > > > > > > On Fri, 30 May 2014 20:02:31 -0400 > > Tim Draegen <[email protected]> wrote: > > > >> Tomasz, can you share the rest of the xml "record"? Cant tell if > >> there is an alignment issue or not without that. > >> > >> =- Tim > >> > >> > >>> On May 30, 2014, at 7:29 PM, Tomasz Chmielewski via dmarc-discuss > >>> <[email protected]> wrote: > >>> > >>> 178.63.195.102 is allowed in SPF: > >>> > >>> # dig +short TXT ptraveler.com > >>> "v=spf1 a mx ip4:178.63.195.102 ip6:2a01:4f8:120:22eb::1111 > >>> ip4:46.4.130.2 ~all" "spf2.0/pra a mx ip4:178.63.195.102 > >>> ip6:2a01:4f8:120:22eb::1111 ip4:46.4.130.2 ~all" > >>> > >>> > >>> And yet, hotmail sends: > >>> > >>> <row> > >>> <source_ip>178.63.195.102</source_ip> > >>> <count>1</count> > >>> <policy_evaluated> > >>> <disposition>none</disposition> > >>> <dkim>fail</dkim> > >>> <spf>fail</spf> > >>> </policy_evaluated> > >>> </row> > >>> > >>> > >>> -- > >>> Tomasz Chmielewski > >>> http://www.sslrack.com > >>> _______________________________________________ > >>> dmarc-discuss mailing list > >>> [email protected] > >>> http://www.dmarc.org/mailman/listinfo/dmarc-discuss > >>> > >>> NOTE: Participating in this list means you agree to the DMARC Note > >>> Well terms (http://www.dmarc.org/note_well.html) > > > > <google.com!ptraveler.com!1401062400!1401148799.xml><hotmail.com!ptraveler.com!1401058800!1401145200.xml><hotmail.com!ptraveler.com!1401318000!1401404400.xml><yahoo.com!ptraveler.com!1401062400!1401148799.xml>_______________________________________________ > > dmarc-discuss mailing list > > [email protected] > > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > > > NOTE: Participating in this list means you agree to the DMARC Note > > Well terms (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
