Help with SPF

squaredd

• March 27, 2014 11:33

Hello, I need some help Some mails received from xxx.org domain on our mail server are being discarded by the SPF. The reason received by the sender is: 550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org
That IP address is from google mail. The SPF record of xxx.org is set to: "v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
For what I understand from the SPF record syntax, "redirect=_spf2.otherdomain.net" causes to ignore the other two "includes:" So only the SPF from "=_spf2.otherdomain.net" is being used. Is this correct? Do you think that changing their SPF to "v=spf1 include:email.domain.co.uk include:_spf2.otherdomain.net include:_spf.google.com ~all"
should fix the problem?

• 

  squaredd

  • March 28, 2014 20:43

  Anyone can point us in the right direction. We've contacted the remote domain with the previous info but didn't believe us. They say it is our fault. TY

  0
• 

  markusa

  • March 28, 2014 21:03

  [quote="squaredd, post: 1606421">Hello, I need some help Some mails received from xxx.org domain on our mail server are being discarded by the SPF. The reason received by the sender is: 550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org
  That IP address is from google mail. The SPF record of xxx.org is set to: "v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
  
  I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings. You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16 "v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
  

  0
• 

  squaredd

  • March 29, 2014 12:20

  [quote="markusa, post: 1607391">I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings. You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16 "v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
  
  Thank you Markusa. I've done a look up of the google SPF and it includes the 74.125.0.0/16 block. So I suspect that the "redirect" modifier is causing this behaviour. Can anyone confirm this? TY

  0
• 

  cPanelMichael

  • April 01, 2014 13:54

  Hello :) Out of curiosity, is there any particular reason you are using this custom SPF record instead of the default record implemented through cPanel? Is there a particular need you must accommodate, or is using the standard SPF record implemented through cPanel an option? Thank you.

  0

Please sign in to leave a comment.