Hi,
When efa is done with scanning the e-mail it delivers it to the receiving mailserver. If that mailserver does spf check they fail.
I dont see how i can fix this or am i doing something wrong?
here is the info:
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=i ... r.stahp.nl]
the mail was coming from efteling.com and was send to stefan@dewal.nl
dewal.nl has mx mailscanner.computel.nl which send the mail to mail.stahp.nl after scanning.
SOLVED] SPF_FAIL opn receiving server
-
- Posts: 33
- Joined: 16 Jan 2019 09:34
SOLVED] SPF_FAIL opn receiving server
Last edited by stefandewal on 15 Feb 2019 12:00, edited 1 time in total.
Re: SPF_FAIL opn receiving server
Hope I understand what you mean correctly: that your mailserver at mail.stahp.nl is complaining about the spf check.
dig mx dewal.nl -> mailscanner.computel.nl
dig mx computel.nl -> mail-scan.nederland.net
If you dig the txt records for the domains mentioned, the alowed ip ranges are visible.
(If there is an include, like include:_spf.smtp.computel.nl , it could be a range, but in this case its 83.137.20.142)
Now its quite simple to determan the reason for a failing spf check, assuming the spf from efteling.com is ok.
dig mx dewal.nl -> mailscanner.computel.nl
dig mx computel.nl -> mail-scan.nederland.net
If you dig the txt records for the domains mentioned, the alowed ip ranges are visible.
Code: Select all
dig TXT dewal.nl
dig TXT computel.nl
Now its quite simple to determan the reason for a failing spf check, assuming the spf from efteling.com is ok.
“We are stuck with technology when what we really want is just stuff that works.” -Douglas Adams
-
- Posts: 33
- Joined: 16 Jan 2019 09:34
Re: SPF_FAIL opn receiving server
henk,
it complains about the spf records of efteling if you click on the link.
it complains about the spf records of efteling if you click on the link.
-
- Posts: 33
- Joined: 16 Jan 2019 09:34
Re: SPF_FAIL opn receiving server
I think this is inevitable because of the nature of SPF. The receiving host should disable spf checks then?
Re: SPF_FAIL opn receiving server
Efa does not complain about the spf check, your mailserver is as I understand it. Why do you think the spf of the efteling is wrong?If that mailserver does spf check they fail.
As you did not post the message details, lets not jump to conclusions.
What do you mean with "it complains about the spf records of efteling if you click on the link."?
“We are stuck with technology when what we really want is just stuff that works.” -Douglas Adams
-
- Posts: 33
- Joined: 16 Jan 2019 09:34
Re: SPF_FAIL opn receiving server
Hi Henk, Once again, thanks for your time.
The mailserver behind the mailscanner receives the mail for dewal.nl coming from efteling.com
That mailserver does a SPF check and sees that the mailscanner isnt in the spf record of efteling.com
Here you can the errorhttp://www.openspf.net/Why?s=mfrom;id=info%40m ... r.stahp.nl
So here it in a nutshell:
mail from efteling.com
mail to dewal.nl
mailserver of dewal.nl does spf check and sees 83.137.20.52 (mailscanner) in the headers and returns a spf fail
i see only one solution: the receving mailserver behind mailscanner needs to stop doing spf checks
The mailserver behind the mailscanner receives the mail for dewal.nl coming from efteling.com
That mailserver does a SPF check and sees that the mailscanner isnt in the spf record of efteling.com
Here you can the errorhttp://www.openspf.net/Why?s=mfrom;id=info%40m ... r.stahp.nl
So here it in a nutshell:
mail from efteling.com
mail to dewal.nl
mailserver of dewal.nl does spf check and sees 83.137.20.52 (mailscanner) in the headers and returns a spf fail
i see only one solution: the receving mailserver behind mailscanner needs to stop doing spf checks
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: SPF_FAIL opn receiving server
That is correct, The eFa should be performing SPF checks instead of your mail server.
-
- Posts: 33
- Joined: 16 Jan 2019 09:34
Re: SPF_FAIL opn receiving server
Thanks. that is what i thought also. but i was hoping for a magical answer.