cancel
Showing results for 
Search instead for 
Did you mean: 

Correct SPF record

Perdrix
Grafter
Posts: 76
Thanks: 8
Registered: ‎18-01-2014

Correct SPF record

I've recently started getting emails rejected that I sent to groups.io mailing lists.

<polgarjozsef@microweb.hu>: host mail.microweb.hu[185.51.65.34] said: 550

    5.7.23 <polgarjozsef@microweb.hu>: Recipient address rejected: Message

    rejected due to: SPF fail - not authorized.

Was this because my TXT DNS record for SPF is incorrect for perdrix.co.uk ?  It was set to:

'@ : v=spf1 mx include:madasafish.com -all'

I changed it to:

'@ : v=spf1 mx +ip4:84.93.230.227 include:madasafish.com -all'

but I'm unclear whether I actually needed to do that or not?

Could someone (Bob?) please clarify:

  1. Whether I correctly interpreted the rejection message
  2. Whether I needed to make the change I did or whether the madasafish include still covers all the plus.net outbound mail servers?

 

Thanks, David

6 REPLIES 6
bobpullen
Community Gaffer
Community Gaffer
Posts: 16,887
Thanks: 4,979
Fixes: 316
Registered: ‎04-04-2007

Re: Correct SPF record

I doubt adding that IP to your SPF record is doing anything worthwhile as the server address will be covered by the madasafish include anyway.

Is microweb.hu the list domain or a list subscriber's domain?

You might have more success changing your SPF policy to softfail. To do this, replace '-all' with '~all'. It's a bit of a lottery how and if other mail servers differentiate between these two options, but you may find it helps.

How the list itself is configured will also influence what is happening WRT SPF.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

Townman
Superuser
Superuser
Posts: 23,052
Thanks: 9,642
Fixes: 160
Registered: ‎22-08-2007

Re: Correct SPF record

@bobpullen 

Could you have the madasafish.com SPF settings verified please...

 

> madasafish.com
"v=spf1 include:_spf-internal.madasafish.com include:_spf-internal2.madasafish.com include:_spf-external.madasafish.com -all"

 

> _spf-internal.madasafish.com
"v=spf1 ip4:84.93.238.165 ip4:84.93.229.196 ip4:84.93.238.117 ip4:84.93.229.142 ip4:84.93.238.118 -all"

 

> _spf-internal2.madasafish.com
"v=spf1 ip4:212.159.14.0/24 ip4:84.93.230.224/27 ip4:212.159.9.109 ip4:212.159.8.109 ip4:212.159.8.108 ip4:212.159.9.108 -all"

 

> _spf-external.madasafish.com
"v=spf1 ip4:62.7.242.139 ip4:62.7.242.140 ip4:62.239.224.97 ip4:62.239.224.98 ip4:62.239.224.99 ip4:213.162.97.76 -all"

If my look-ups are complete...

 

84.93.230.227 is not included in the above.

They are all "-all" - hard fail.

 

Is that correct / intentional?

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,887
Thanks: 4,979
Fixes: 316
Registered: ‎04-04-2007

Re: Correct SPF record


@Townman wrote:

84.93.230.227 is not included in the above.


Yes it is: -

ip4:84.93.230.224/27

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

Townman
Superuser
Superuser
Posts: 23,052
Thanks: 9,642
Fixes: 160
Registered: ‎22-08-2007

Re: Correct SPF record

Dhooo!!

Missed the /27 bit significance!! Embarrassed

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Perdrix
Grafter
Posts: 76
Thanks: 8
Registered: ‎18-01-2014

Re: Correct SPF record

>Is microweb.hu the list domain or a list subscriber's domain?

Subscriber's domain

David

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,887
Thanks: 4,979
Fixes: 316
Registered: ‎04-04-2007

Re: Correct SPF record

It's likely the list configuration that's causing the problem in which case. Doubtful you'll get that changed so you may need to look at lowering the aggressiveness of the SPF record (or removing it). Removing it could introduce problems with other non-list mail recipients though.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵