Nothing changed in our configuration in the last 2 years. Suddenly has begun rejecting mail from external senders. Here is the error we are getting:
[<My Pubic IP>]
Remote Server returned '554 5.0.0 <[My Pubic IP>] #5.0.0 smtp; 5.1.0 - Unknown address error 554-'5.7.1 <user@mydomain.com>: Recipient address rejected: Rejected by SPF: <My Pubic IP> is not a designated mailserver for sender%40remotedomain.com (context mfrom, on <smtp.mydomain.com>)' (delivery attempts: 0)>'
So it appears the message is coming in from the internet, and then being routed to my public MX record back into the mail gateway which is causing the messages to be rejected. My mail gateway sits in a DMZ and uses internal DNS servers for resolution. All DNS checks result in the proper IP being resolved.
[<My Pubic IP>]
Remote Server returned '554 5.0.0 <[My Pubic IP>] #5.0.0 smtp; 5.1.0 - Unknown address error 554-'5.7.1 <user@mydomain.com>: Recipient address rejected: Rejected by SPF: <My Pubic IP> is not a designated mailserver for sender%40remotedomain.com (context mfrom, on <smtp.mydomain.com>)' (delivery attempts: 0)>'
So it appears the message is coming in from the internet, and then being routed to my public MX record back into the mail gateway which is causing the messages to be rejected. My mail gateway sits in a DMZ and uses internal DNS servers for resolution. All DNS checks result in the proper IP being resolved.