SOLVED] SPF_FAIL opn receiving server

Bugs in eFa 4
Post Reply
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

SOLVED] SPF_FAIL opn receiving server

Post by stefandewal »

Hi,

When efa is done with scanning the e-mail it delivers it to the receiving mailserver. If that mailserver does spf check they fail.

I dont see how i can fix this or am i doing something wrong?

here is the info:

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=i ... r.stahp.nl]

the mail was coming from efteling.com and was send to stefan@dewal.nl

dewal.nl has mx mailscanner.computel.nl which send the mail to mail.stahp.nl after scanning.
Last edited by stefandewal on 15 Feb 2019 12:00, edited 1 time in total.
henk
Posts: 517
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: SPF_FAIL opn receiving server

Post by henk »

Hope I understand what you mean correctly: that your mailserver at mail.stahp.nl is complaining about the spf check.

dig mx dewal.nl -> mailscanner.computel.nl
dig mx computel.nl -> mail-scan.nederland.net

If you dig the txt records for the domains mentioned, the alowed ip ranges are visible.

Code: Select all

dig TXT  dewal.nl
dig TXT  computel.nl
(If there is an include, like include:_spf.smtp.computel.nl , it could be a range, but in this case its 83.137.20.142)

Now its quite simple to determan the reason for a failing spf check, assuming the spf from efteling.com is ok.
“We are stuck with technology when what we really want is just stuff that works.” -Douglas Adams
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal »

henk,

it complains about the spf records of efteling if you click on the link.
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal »

I think this is inevitable because of the nature of SPF. The receiving host should disable spf checks then?
henk
Posts: 517
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: SPF_FAIL opn receiving server

Post by henk »

If that mailserver does spf check they fail.
Efa does not complain about the spf check, your mailserver is as I understand it. Why do you think the spf of the efteling is wrong?
As you did not post the message details, lets not jump to conclusions.

What do you mean with "it complains about the spf records of efteling if you click on the link."?
“We are stuck with technology when what we really want is just stuff that works.” -Douglas Adams
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal »

Hi Henk, Once again, thanks for your time.

The mailserver behind the mailscanner receives the mail for dewal.nl coming from efteling.com

That mailserver does a SPF check and sees that the mailscanner isnt in the spf record of efteling.com

Here you can the errorhttp://www.openspf.net/Why?s=mfrom;id=info%40m ... r.stahp.nl

So here it in a nutshell:

mail from efteling.com
mail to dewal.nl

mailserver of dewal.nl does spf check and sees 83.137.20.52 (mailscanner) in the headers and returns a spf fail

i see only one solution: the receving mailserver behind mailscanner needs to stop doing spf checks
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: SPF_FAIL opn receiving server

Post by shawniverson »

That is correct, The eFa should be performing SPF checks instead of your mail server.
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal »

Thanks. that is what i thought also. but i was hoping for a magical answer.
Post Reply