The record was
"v=spf1 a mx ptr include:earthlink.net ~all"
I smarthost my mail through smtpauth.earthlink.net. The mail path then bounces around inside earthlink for a while. The "spf why" page says:
hermes.apache.org saw a message coming from the IP address 209.86.89.61 which is smtpauth01.mail.atl.earthlink.net; the sender claimed to be [EMAIL PROTECTED]
When you do a SPF include, it basicaly winds up including the SPF record for earthlink.net.
;; QUESTION SECTION: ;earthlink.net. IN TXT
;; ANSWER SECTION:
earthlink.net. 1800 IN TXT "v=spf1 ip4:207.217.120.0/23 ip4:207.69.200.0/24 ip4:209.86.93.0/24 ip4:207.69.195.0/24 ?all
"
However, if you look, earthlink's SPF record doesn't include 209.86.98.61, therefore you fail the test.
