On 4/20/11 12:58 PM, a.sm...@ukgrid.net wrote:
Hi,

I just noticed this, I have an email which was marked as spam. One of the rules it flagged was:

0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

In the headers I see:

Received: from [62.8.109.125] (port=24079 helo=mail.dynamail.co.uk)

In the SPF record for dynamail.co.uk I see:

"v=spf1 a mx mx:mail.dynamail.co.uk ip4:195.74.141.160/27 ip4:62.8.109.125 ip4:203.31.191.38 ip4:62.8.109.118 ip4:62.8.109.124 ip4:62.8.109.123 ip4:62.8.109.114 ip4:62.8.109.122 ip4:62.8.109.116 -all"

post FULL headers, don't cut anything off or spoof anything, to pastebin, and post the link here.

a half dozen reasons this might have had problems.

(and I assume, that .7 points out of 5 wasn't the largest offender?)


So firstly the sending IP is mentioned explicitly, and additionally the record is set to hard fail if it doesn't match, not soft fail. Any idea whats going on here?

most likely, you don't have your local/trusted networks set, and/or the 'from' really wasn't 'from' @dynamail.co.uk

this is why we need FULL headers.



SpamAssassin version is SpamAssassin 3.3.1 (2010-03-16).

thanks, Andy.





--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation

   * Best Intrusion Prevention Product, Networks Product Guide
   * Certified SNORT Integrator
   * Hot Company Award, World Executive Alliance
   * Best in Email Security, 2010 Network Products Guide
   * King of Spam Filters, SC Magazine

______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________

Reply via email to