SOLVED] SPF_FAIL opn receiving server

Testing of eFa 4
Post Reply
stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

SOLVED] SPF_FAIL opn receiving server

Post by stefandewal » 12 Feb 2019 15:04

Hi,

When efa is done with scanning the e-mail it delivers it to the receiving mailserver. If that mailserver does spf check they fail.

I dont see how i can fix this or am i doing something wrong?

here is the info:

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=i ... r.stahp.nl]

the mail was coming from efteling.com and was send to stefan@dewal.nl

dewal.nl has mx mailscanner.computel.nl which send the mail to mail.stahp.nl after scanning.
Last edited by stefandewal on 15 Feb 2019 12:00, edited 1 time in total.

henk
Posts: 386
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: SPF_FAIL opn receiving server

Post by henk » 12 Feb 2019 17:20

Hope I understand what you mean correctly: that your mailserver at mail.stahp.nl is complaining about the spf check.

dig mx dewal.nl -> mailscanner.computel.nl
dig mx computel.nl -> mail-scan.nederland.net

If you dig the txt records for the domains mentioned, the alowed ip ranges are visible.

Code: Select all

dig TXT  dewal.nl
dig TXT  computel.nl
(If there is an include, like include:_spf.smtp.computel.nl , it could be a range, but in this case its 83.137.20.142)

Now its quite simple to determan the reason for a failing spf check, assuming the spf from efteling.com is ok.

stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal » 13 Feb 2019 05:19

henk,

it complains about the spf records of efteling if you click on the link.

stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal » 13 Feb 2019 11:03

I think this is inevitable because of the nature of SPF. The receiving host should disable spf checks then?

henk
Posts: 386
Joined: 14 Dec 2015 22:16
Location: Netherlands
Contact:

Re: SPF_FAIL opn receiving server

Post by henk » 13 Feb 2019 12:02

If that mailserver does spf check they fail.
Efa does not complain about the spf check, your mailserver is as I understand it. Why do you think the spf of the efteling is wrong?
As you did not post the message details, lets not jump to conclusions.

What do you mean with "it complains about the spf records of efteling if you click on the link."?

stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal » 15 Feb 2019 08:02

Hi Henk, Once again, thanks for your time.

The mailserver behind the mailscanner receives the mail for dewal.nl coming from efteling.com

That mailserver does a SPF check and sees that the mailscanner isnt in the spf record of efteling.com

Here you can the errorhttp://www.openspf.net/Why?s=mfrom;id=info%40m ... r.stahp.nl

So here it in a nutshell:

mail from efteling.com
mail to dewal.nl

mailserver of dewal.nl does spf check and sees 83.137.20.52 (mailscanner) in the headers and returns a spf fail

i see only one solution: the receving mailserver behind mailscanner needs to stop doing spf checks

User avatar
shawniverson
Posts: 2821
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: SPF_FAIL opn receiving server

Post by shawniverson » 15 Feb 2019 11:46

That is correct, The eFa should be performing SPF checks instead of your mail server.
Version eFa 4.0.0 RC3 now available in testing repo. Come join us in advancing eFa!

stefandewal
Posts: 33
Joined: 16 Jan 2019 09:34

Re: SPF_FAIL opn receiving server

Post by stefandewal » 15 Feb 2019 12:00

Thanks. that is what i thought also. but i was hoping for a magical answer.

Post Reply