SPF false positives

K

kiddx

Member
Apr 6, 2008
47
0
6
West Palm Beach, Florida, United States
We are coming up with an error where for *one* client they are getting spf failure on sending. When I went to mxtoolbox.com their SPF record looks just fine. In the interim I went ahead and added them to the whitelist (ip and domain) and still gets spf rejected. I moved my whitelist to 100 as a test. I think it was at 96 behind a BadMail custom rule i made and the blacklist.

Any idea why the spf object is failing just for this one particular domain? they are using some 3rd party mail hosting and the spf record shows their a: record of mail.company.com which is the same IP that mail is flowing from.
 
kiddx said:
We are coming up with an error where for *one* client they are getting spf failure on sending. When I went to mxtoolbox.com their SPF record looks just fine. In the interim I went ahead and added them to the whitelist (ip and domain) and still gets spf rejected. I moved my whitelist to 100 as a test. I think it was at 96 behind a BadMail custom rule i made and the blacklist.

Any idea why the spf object is failing just for this one particular domain? they are using some 3rd party mail hosting and the spf record shows their a: record of mail.company.com which is the same IP that mail is flowing from.
Click to expand...

without detailed description about the whole email sending and all logs we can´t say anything.
 
As always, thanks for the quick response. I placed their IP in the Mail Proxy /Networks area. is this the SMTP whitelist you are referring?

Just for curious, here is what Im getting:

NOQUEUE: reject: RCPT from mail.comitersinger.com[75.77.60.83]: 554 5.7.1
<cscott@rendinaco.com>: Recipient address rejected: Please see
http://www.openspf.org/Why?s=helo&id=mail.comitersinger.com&ip=75.77.60.83&r=pr
oxmox.levelfive.us; from=<asprague@comitersinger.com> to=<cscott@rendinaco.com>
proto=ESMTP helo=<mail.comitersinger.com>

When I goto the link it says SPF isnt configured right. The IP thats connecting is the right IP, rDNS matches and the SPF record has an a:mail.comitersinger.com linked to it...
 
okay well that didnt work, we started getting mail, and we recieved about 7 emails from them and now they are all failing spf again. i put the domain, the ip in the whitelist. i put their ip in the trusted networks...

what else can i do?
 
kiddx said:
okay well that didnt work, we started getting mail, and we recieved about 7 emails from them and now they are all failing spf again. i put the domain, the ip in the whitelist. i put their ip in the trusted networks...

what else can i do?
Click to expand...

install the latest version (2.4 - 4237) and open a support ticket at support@proxmox.com if the problem is still here.

this is free if you own a commercial license.
 
You must log in or register to reply here.
Top Bottom