I've been seeing mail from some IP addresses that I think are supposed to be legitimate sources of Chase bank email, but they do not appear to be included in the requisite SPF record. What's more, Chase SPF is "-all" so this mail is not supposed to be accepted.
For example: 142.54.244.55 sender @chase.com (this range seems to be used mostly for @e.chase.com) Addresses missing from SPF like this seem to be an ongoing problem for Chase, as I've seen others such as in the range of 146.143.72.xx last year that had the same problem, and in fact 142.54.244.5x regularly seem to disappear from SPF for e.chase.com, maybe due to the large number of subdomains Chase sends from. Either that or my resolver has a problem, but I haven't experienced more general issues. Then this IP's SPF is ok, but the FCrDNS does not exist: 13.111.171.213 Also, anecdotally, it does not look like Chase mail servers retry messages that are rejected with temp-fail 4xx codes. _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
