topic Re: SPF entries for madasafish in Email

SPF entries for madasafish

Teece — Thu, 28 Oct 2021 10:40:28 GMT

I have had a DMARC report referencing an SPF failure for mail routed via avasout-ptp-001.plus.net. As far as I can see, this isn't included in the current madasafish.com SPF records. Is this a new addition that needs to be updated, or has something else gone wrong?

Re: SPF entries for madasafish

LaurenB — Fri, 29 Oct 2021 12:24:17 GMT

Hiya @Teece, thanks for getting in touch. I am sorry for the error you're having.

So we can query this further with our Net OPs Team for you, can you please get back to us confirming the actual error?

Re: SPF entries for madasafish

Teece — Sat, 30 Oct 2021 10:34:26 GMT

The DMARC report showing the SPF failure is below. My DNS entry for SPF is v=spf1 +a +mx include:madasafish.com ~all", which is, as far as I'm aware, the recommended setting. Looking at the DNS entries, avasout-ptp-001.plus.net does not appear to be included.

<report_metadata>

<org_name>google.com</org_name>

<email>noreply-dmarc-support@google.com</email>

<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>

<report_id>16340669309761032485</report_id>

<date_range>

</date_range>

</report_metadata>

<policy_published>

<domain>bragbrook.com</domain>
<adkim>r</adkim>
<aspf>r</aspf>
<p>reject</p>
<sp>none</sp>
<pct>10</pct>

</policy_published>

<row>

<source_ip>84.93.230.227</source_ip>

<policy_evaluated>

<disposition>quarantine</disposition>

<type>sampled_out</type>

</reason>

</policy_evaluated>

</row>

<header_from>bragbrook.com</header_from>

</identifiers>

<auth_results>

<spf>

<domain>avasout-ptp-001.plus.net</domain>

</spf>

</auth_results>

</record>

</feedback>

Re: SPF entries for madasafish

Gandalf — Sun, 31 Oct 2021 18:15:52 GMT

Hi @Teece

Thanks for the DMARC report, let me speak to the right people and I'll aim to get back to you tomorrow.

Re: SPF entries for madasafish

dvorak — Sun, 31 Oct 2021 18:21:51 GMT

Moderators Note

Posts released from spam filter and duplicates removed.

Re: SPF entries for madasafish

Gandalf — Mon, 01 Nov 2021 10:38:26 GMT

Hi @Teece

I've discussed with a colleague from NetOps. In summary, the server is part of our SPF records but to try to explain.

We have records here: dig +short -t txt madasafish.com "v=spf1 include:_spf-internal.madasafish.com include:_spf-internal2.madasafish.com include:_spf-external.madasafish.com -all"

and here: dig +short -t txt _spf-internal2.madasafish.com "v=spf1 ip4:212.159.14.0/24 ip4:84.93.230.224/27 ip4:212.159.9.109 ip4:212.159.8.109 ip4:212.159.8.108 ip4:212.159.9.108 -all"

This shows the servers with the IP addresses are allowed to send mail for the Madasafish domain. In that range we have a /27 which covers avasout-ptp-001.plus.net.

Does this help? Let me know if you're experiencing any issues.