spf-discuss
[Top] [All Lists]

Re: [spf-discuss] spf fail

2006-01-09 08:55:47
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chibra Iheakaram wrote:
Julian Mehnle wrote:
Chibra Iheakaram wrote:
My Mail server flagged a message coming from bigfish.com as soft
fail. The sending IP Address is 12.129.219.97 and its is published as
an spf source for bigfish.com, but when I looked at the email header
I saw this:
Received: from outbound1-haw-R.bigfish.com
  (outbound-haw.frontbridge.com [12.129.219.97])

Any ideas on what may be wrong?

[...] I don't have the slightest idea where the SoftFail result comes
from, since none of [the bigfish.com] records end in "~all" or have a
"~" qualifier in them elsewhere.

Where do you take that SoftFail result from?  A "Received-SPF:" header?

Here is the Received-SPF

Received-SPF: fail (gamwsm04.mwga.mailwatch.com: domain of
  SBoudrea(_at_)sovereignbank(_dot_)com does not designate 12.129.219.97 as
  permitted sender) receiver=gamwsm04.mwga.mailwatch.com;
  client_ip=12.129.219.97; 
envelope-from=SBoudrea(_at_)sovereignbank(_dot_)com;
Received: from outbound1-haw-R.bigfish.com (outbound-haw.frontbridge.com
  [12.129.219.97])

So the envelope sender (MAIL FROM) was 
(_dot_)(_dot_)(_dot_)(_at_)sovereignbank(_dot_)com, not
(_dot_)(_dot_)(_dot_)(_at_)bigfish(_dot_)com!

| $ ./spfquery -i 12.129.219.97 -m sovereignbank.com -h 
outbound1-haw-R.bigfish.com
| pass
| Please see 
http://www.openspf.org/why.html?sender=sovereignbank.com&ip=12.129.219.97&receiver=spfquery:
 12.129.219.97 contains 12.129.219.97
| spfquery: domain of sovereignbank.com designates 12.129.219.97 as permitted 
sender
| Received-SPF: pass (spfquery: domain of sovereignbank.com designates 
12.129.219.97 as permitted sender) client-ip=12.129.219.97; 
envelope-from=sovereignbank.com; helo=outbound1-haw-R.bigfish.com;

So it really should have passed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDwodOwL7PKlBZWjsRAsWNAJsG022blo4V8e0CnkzmXIFmmkTJ1wCgjGI/
V/5gyKiYvKYK6mfHFm9QkKQ=
=MhYy
-----END PGP SIGNATURE-----

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

<Prev in Thread] Current Thread [Next in Thread>