A message passed through my server yesterday from an @allianzlife.com address with the following Received header:
Received: from allianzlife.com (securemail.allianzlife.com [204.52.250.91] (may be forged))
While investigating other issues with the message, I noted that (unless my coffee hasn't kicked in yet) it should have matched on SPF_SOFTFAIL, but didn't. In fact, it didn't match on _any_ SPF rules. I have a number of other messages in my logs that hit all of the various SPF rules, so I know that things are at least partially working. The ugly spf trace is included in the pastebin link, but essentially this falls back on "~all". Am I missing something obvious?
http://pastebin.com/m1134a08b /Jason