SPF entries for madasafish

[#1]

I have had a DMARC report referencing an SPF failure for mail routed via avasout-ptp-001.plus.net. As far as I can see, this isn't included in the current madasafish.com SPF records. Is this a new addition that needs to be updated, or has something else gone wrong?

[#2]

Hiya @Teece, thanks for getting in touch. I am sorry for the error you're having.

So we can query this further with our Net OPs Team for you, can you please get back to us confirming the actual error?

[#3]

The DMARC report showing the SPF failure is below. My DNS entry for SPF is v=spf1 +a +mx include:madasafish.com ~all", which is, as far as I'm aware, the recommended setting. Looking at the DNS entries, avasout-ptp-001.plus.net does not appear to be included.

<report_metadata>

<org_name>google.com</org_name>

<email>noreply-dmarc-support@google.com</email>

<extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>

<report_id>16340669309761032485</report_id>

<date_range>

<begin>1635292800</begin>

<end>1635379199</end>

</date_range>

</report_metadata>

<policy_published>

<domain>bragbrook.com</domain>

<adkim>r</adkim>

<aspf>r</aspf>

<p>reject</p>

<sp>none</sp>

<pct>10</pct>

</policy_published>

<record>

<row>

<source_ip>84.93.230.227</source_ip>

<count>1</count>

<policy_evaluated>

<disposition>quarantine</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

<reason>

<type>sampled_out</type>

<comment/>

</reason>

</policy_evaluated>

</row>

<identifiers>

<header_from>bragbrook.com</header_from>

</identifiers>

<auth_results>

<spf>

<domain>avasout-ptp-001.plus.net</domain>

<result>none</result>

</spf>

</auth_results>

</record>

</feedback>

[#4]

Hi @Teece

Thanks for the DMARC report, let me speak to the right people and I'll aim to get back to you tomorrow.

[#5]

Moderators Note

Posts released from spam filter and duplicates removed.

[#6]

Hi @Teece 

I've discussed with a colleague from NetOps. In summary, the server is part of our SPF records but to try to explain. 

We have records here: dig +short -t txt madasafish.com "v=spf1 include:_spf-internal.madasafish.com include:_spf-internal2.madasafish.com include:_spf-external.madasafish.com -all"

and here: dig +short -t txt _spf-internal2.madasafish.com "v=spf1 ip4:212.159.14.0/24 ip4:84.93.230.224/27 ip4:212.159.9.109 ip4:212.159.8.109 ip4:212.159.8.108 ip4:212.159.9.108 -all"

This shows the servers with the IP addresses are allowed to send mail for the Madasafish domain. In that range we have a /27 which covers avasout-ptp-001.plus.net.

Does this help? Let me know if you're experiencing any issues.