RE: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Andy Schmidt
What is the issue? What error message? Was it bounced mail? What did the NDR
say? I could be a recipient trying to forward mail to another server, or an
end-user trying to send email from home using their local ISP... etc.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Sunday, August 31, 2008 10:18 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SPF Issue

Hi all

I have som SPF issues
It was working fine some times back
I use Mixrosoft dns
I have
(same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
mailText   v=spf1 mx ip4:217.64.107.106 -all

What is wrong with above ?

TIA





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re[2]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Pete McNeil
It's a tiny thing - but it might matter:

When I dig for your spf record

dig @ns1.cefib.com cefib.com -t txt

I get:

;; ANSWER SECTION:
cefib.com.  3540IN  TXT v=spf1 mx ip4:217.64.107.106 
-all

On the surface it looks correct, but the -all should be ~all

That is - it should be a tilde not a dash.

Seems like a little thing, but that's also the only thing that doesn't
look right when compared to what I get approximating this at
openspf.org.

Hope this helps,

_M


On Monday, September 1, 2008, 7:15:35 PM, Serge wrote:

S Here is what i get from DNSSTUFF
S Not sure what else to do to find out what is going on


S How I am searching:

S Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got
S referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
S Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]:
S Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
S Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]:
S Reports that no SPF records exist. [took 301 ms] Response: No SPF records
S exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an
S authoritative nameserver for cefib.com.) says that there are no SPF records
S for cefib.com. The E-mail address in charge of the cefib.com. zone is:
S [EMAIL PROTECTED]
S There is no need to refresh the page -- to see the DNS traversal, to make
S sure that all DNS servers are reporting the same results, you can Click
S Here. Note that these results are obtained in real-time, meaning that these
S are not cached results. These results are what DNS resolvers all over the
S world will see right now (unless they have cached information).





S - Original Message - 
S From: Andy Schmidt [EMAIL PROTECTED]
S To: declude.junkmail@declude.com
S Sent: Monday, September 01, 2008 12:41 PM
S Subject: RE: [Declude.JunkMail] SPF Issue


 What is the issue? What error message? Was it bounced mail? What did the 
 NDR
 say? I could be a recipient trying to forward mail to another server, or 
 an
 end-user trying to send email from home using their local ISP... etc.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
 Sent: Sunday, August 31, 2008 10:18 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] SPF Issue

 Hi all

 I have som SPF issues
 It was working fine some times back
 I use Mixrosoft dns
 I have
 (same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
 mailText   v=spf1 mx ip4:217.64.107.106 -all

 What is wrong with above ?

 TIA





 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 




S ---
S This E-mail came from the Declude.JunkMail mailing list.  To
S unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
S type unsubscribe Declude.JunkMail.  The archives can be found
S at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re[2]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Pete McNeil
Ooops.

I take that last post back I found something else looking more
closely:

;; ANSWER SECTION:
cefib.com.  3540IN  TXT v=spf1 mx ip4:217.64.107.106 
-all

The mx should not be naked.

Presumably what you wanted was this:

v=spf1 mx:cefib.com ip4:217.64.107.106 ~all

Hope this helps,

_M

On Monday, September 1, 2008, 7:15:35 PM, Serge wrote:

S Here is what i get from DNSSTUFF
S Not sure what else to do to find out what is going on


S How I am searching:

S Searching for cefib.com SPF record at f.root-servers.net [192.5.5.241]: Got
S referral to D.GTLD-SERVERS.NET. (zone: com.) [took 59 ms]
S Searching for cefib.com SPF record at D.GTLD-SERVERS.NET. [192.31.80.30]:
S Got referral to ns1.cefib.com. (zone: cefib.com.) [took 31 ms]
S Searching for cefib.com SPF record at ns1.cefib.com. [217.64.107.100]:
S Reports that no SPF records exist. [took 301 ms] Response: No SPF records
S exist for cefib.com. [Neg TTL=3540 seconds] Details: ns1.cefib.com. (an
S authoritative nameserver for cefib.com.) says that there are no SPF records
S for cefib.com. The E-mail address in charge of the cefib.com. zone is:
S [EMAIL PROTECTED]
S There is no need to refresh the page -- to see the DNS traversal, to make
S sure that all DNS servers are reporting the same results, you can Click
S Here. Note that these results are obtained in real-time, meaning that these
S are not cached results. These results are what DNS resolvers all over the
S world will see right now (unless they have cached information).





S - Original Message - 
S From: Andy Schmidt [EMAIL PROTECTED]
S To: declude.junkmail@declude.com
S Sent: Monday, September 01, 2008 12:41 PM
S Subject: RE: [Declude.JunkMail] SPF Issue


 What is the issue? What error message? Was it bounced mail? What did the 
 NDR
 say? I could be a recipient trying to forward mail to another server, or 
 an
 end-user trying to send email from home using their local ISP... etc.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge
 Sent: Sunday, August 31, 2008 10:18 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] SPF Issue

 Hi all

 I have som SPF issues
 It was working fine some times back
 I use Mixrosoft dns
 I have
 (same as parent)Text   v=spf1 mx ip4:217.64.107.106 -all
 mailText   v=spf1 mx ip4:217.64.107.106 -all

 What is wrong with above ?

 TIA





 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 




S ---
S This E-mail came from the Declude.JunkMail mailing list.  To
S unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
S type unsubscribe Declude.JunkMail.  The archives can be found
S at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re[3]: [Declude.JunkMail] SPF Issue

2008-09-01 Thread Sanford Whiteman
 The mx should not be naked.

Actually,  naked  mx  mechanism  is  fine.  So is -all (deny-all being
preferable  to  anything  looser). The cefib.com TXT record is a valid
SPF record.

The  problem is likely to be an NXDOMAIN received by DNSStuff, perhaps
due to routing problems. Other remote tests such as Men and Mice's DIG
online work fine.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.