Page 1 of 1

SOLVED] SPF_FAIL opn receiving server

Posted: 12 Feb 2019 15:04
by stefandewal
Hi,

When efa is done with scanning the e-mail it delivers it to the receiving mailserver. If that mailserver does spf check they fail.

I dont see how i can fix this or am i doing something wrong?

here is the info:

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=i ... r.stahp.nl]

the mail was coming from efteling.com and was send to stefan@dewal.nl

dewal.nl has mx mailscanner.computel.nl which send the mail to mail.stahp.nl after scanning.

Re: SPF_FAIL opn receiving server

Posted: 12 Feb 2019 17:20
by henk
Hope I understand what you mean correctly: that your mailserver at mail.stahp.nl is complaining about the spf check.

dig mx dewal.nl -> mailscanner.computel.nl
dig mx computel.nl -> mail-scan.nederland.net

If you dig the txt records for the domains mentioned, the alowed ip ranges are visible.

Code: Select all

dig TXT  dewal.nl
dig TXT  computel.nl
(If there is an include, like include:_spf.smtp.computel.nl , it could be a range, but in this case its 83.137.20.142)

Now its quite simple to determan the reason for a failing spf check, assuming the spf from efteling.com is ok.

Re: SPF_FAIL opn receiving server

Posted: 13 Feb 2019 05:19
by stefandewal
henk,

it complains about the spf records of efteling if you click on the link.

Re: SPF_FAIL opn receiving server

Posted: 13 Feb 2019 11:03
by stefandewal
I think this is inevitable because of the nature of SPF. The receiving host should disable spf checks then?

Re: SPF_FAIL opn receiving server

Posted: 13 Feb 2019 12:02
by henk
If that mailserver does spf check they fail.
Efa does not complain about the spf check, your mailserver is as I understand it. Why do you think the spf of the efteling is wrong?
As you did not post the message details, lets not jump to conclusions.

What do you mean with "it complains about the spf records of efteling if you click on the link."?

Re: SPF_FAIL opn receiving server

Posted: 15 Feb 2019 08:02
by stefandewal
Hi Henk, Once again, thanks for your time.

The mailserver behind the mailscanner receives the mail for dewal.nl coming from efteling.com

That mailserver does a SPF check and sees that the mailscanner isnt in the spf record of efteling.com

Here you can the errorhttp://www.openspf.net/Why?s=mfrom;id=info%40m ... r.stahp.nl

So here it in a nutshell:

mail from efteling.com
mail to dewal.nl

mailserver of dewal.nl does spf check and sees 83.137.20.52 (mailscanner) in the headers and returns a spf fail

i see only one solution: the receving mailserver behind mailscanner needs to stop doing spf checks

Re: SPF_FAIL opn receiving server

Posted: 15 Feb 2019 11:46
by shawniverson
That is correct, The eFa should be performing SPF checks instead of your mail server.

Re: SPF_FAIL opn receiving server

Posted: 15 Feb 2019 12:00
by stefandewal
Thanks. that is what i thought also. but i was hoping for a magical answer.