Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

zopatista · ‎17-08-2017

I've recently reviewed my personal domain SPF record and switched it from using

include:madasafish.com

to

include:_spf-internal.plus.net include:_spf-internal2.plus.net

on advice found on the forums here.

I also have a DMARC record requesting that I get sent delivery summaries (rua=mailto:postmaster@[my domain]), and Google was so kind to tell me that it received legitimate, DKIM signed emails that I know I sent from IP addresses that are not in the plus.net SPF lists:

  <record>
    <row>
      <source_ip>212.227.126.135</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <!-- snip -->
  </record>
  <record>
    <row>
      <source_ip>212.227.126.131</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <!-- snip -->
  </record>

These were legitimate delivery attempts (signed cryptographically by my SMTP server with the correct DKIM key), but these two addresses, 212.227.126.131 and 212.227.126.135 are not listed in the plus.net spf-internal records, nor are they in the madasafish.com SPF records. Reverse DNS on these IP addresses gives me mout.kundenserver.de. for both.

Is there something misconfigured in the Plus.net relay setup?

Townman · ‎22-08-2007

Odd! Those IP addresses are registered as belonging to 1&1.

In another browser tab, login into the Plusnet user portal BEFORE clicking the fault & ticket links

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

If this post helped, please click the Thumbs Up and if it fixed your issue, please click the This fixed my problem green button below.

Baldrick1 · ‎30-06-2016

I don't know if it's connected with this problem but my Namesco spf record used to pass testing but now it fails.

Has spf1-internal.plus.net gone off line or is my record corrupted?

Moderator and Customer
If this helped - select the Thumb
If it fixed it, help others - select 'This Fixed My Problem'

MisterW · ‎30-07-2007

@Baldrick1 it should be _spf-internal.plus.net

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Baldrick1 · ‎30-06-2016

Tnaks again, @MisterW

I'm clearly unable to see the wood for the trees! Obviously total unconnected, all is now well. Sorry to have butted in!

Moderator and Customer
If this helped - select the Thumb
If it fixed it, help others - select 'This Fixed My Problem'