-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com]On Behalf Of paul
Sent: Friday, February 25, 2005 11:48 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: RE: [spf-discuss] Handling of -all
I do have a quick question, I just set up a SPF string on my DNS
hosting and when I test it I get the response
SPF lookup of sender user(_at_)mydomain(_dot_)com from IP X.X.X.X:
SPF string used: v=spf1 ip4:X.X.X.X/28 ip4:X.X.X.X/28 mx ptr ~all.
Processing SPF string: v=spf1 ip4:X.X.X.X/28 ip4:X.X.X.X/28 mx ptr ~all.
Testing 'ip4:X.X.X.X/28' on IP=X.X.X.X, target domain X.X.X.X/28,
CIDR 28, default=PASS. MATCH!
Testing 'ip4:X.X.X.X/28' on IP=X.X.X.X, target domain X.X.X.X/28,
CIDR 28, default=PASS.
Testing 'mx' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=PASS.
Testing 'ptr' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=PASS.
Testing 'all' on IP=X.X.X.X, target domain mydomain.com, CIDR 32,
default=SOFTFAIL.
what would cause a softfail on the ~all"? I am within range of my
ip addresses specified. Thanks in advance
Because that's what ~all means. Your SPF record ends in ~all.
What the test is doing is telling you that it's evaluating each mechanism in
the record. In real life, once a match is found, evaluation stops. As you
can see from:
Testing 'ip4:X.X.X.X/28' on IP=X.X.X.X, target domain X.X.X.X/28,
CIDR 28, default=PASS. MATCH!
Your record matched the mechanism you expected it to. I don't believe that
there is a problem here. I'd suggest you follow-up on spf-help if
necessary.
Scott Kitterman