-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Chibra Iheakaram wrote:
My Mail server flagged a message coming from bigfish.com as soft fail.
The sending IP Address is 12.129.219.97 and its is published as an spf
source for bigfish.com, but when I looked at the email header I saw
this:
Received: from outbound1-haw-R.bigfish.com (outbound-haw.frontbridge.com
[12.129.219.97])
Any ideas on what may be wrong?
| $ dig TXT bigfish.com +sho
| "v=spf1 ip4:12.129.199.61 ip4:206.16.192.253 ip4:216.148.222.61
| ip4:63.161.60.0/25 ip4:213.206.137.197 ip4:217.117.146.230
| ip4:12.129.219.152/29 ip4:62.209.45.166 ip4:12.129.219.97
| ip4:12.129.219.126 ip4:207.45.163.10 -all"
| "v=spf2.0/pra ip4:12.129.199.61 ip4:206.16.192.253 ip4:216.148.222.61
| ip4:63.161.60.0/25 ip4:213.206.137.197 ip4:217.117.146.230
| ip4:12.129.219.152/29 ip4:62.209.45.166 ip4:12.129.219.97
| ip4:12.129.219.126 ip4:207.45.163.10 -all"
(Side-note: "v=spf2.0/pra" is defined nowhere, the Sender-ID specs say it's
"spf2.0/pra". I have no idea why they removed the "v=" part. It confuses
people regularly.)
| $ dig A outbound1-haw-R.bigfish.com +sho
| 12.129.219.97
| $ dig -x 12.129.219.97 +sho
| outbound-haw.frontbridge.com.
So that fits your "Received:" header.
However I don't have the slightest idea where the SoftFail result comes
from, since none of your records end in "~all" or have a "~" qualifier in
them elsewhere.
Where do you take that SoftFail result from? A "Received-SPF:" header?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDvv0awL7PKlBZWjsRAkBLAKCtMJ1HxOvcToRLaLnWGPD7kaRfHgCg1HrK
xRDBb9QB/Cr5Qwe93CCFEmk=
=0zB6
-----END PGP SIGNATURE-----
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com