I'm receiving reports of email failures from rackspace.com. Their SPF record is HUGE, but passes testing from mxtoolbox.com and kitterman.com testing tools, I've temporarily had to use SPF override to accept all mail from them. Is this a bug?
The logs are showing: 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> Message-Score: added -10 (tlsValencePB) for SSL-TLS-connection-OK, total score for this message is now -10 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED Whitelisted sender Domain: @rackspace.com 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED DKIM-Signature found 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED info: detected IP's on the mail routing way: 50.56.229.13, 216.32.180.54 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED info: detected source IP: 50.56.229.13 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED info: domain rackspace.com has published a DMARC record 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED SPF: found SPAMMER SPF record/mechanism 'mechanism 'ip4:192.237.132.24/31' matched' for domain rackspace.com - SPF result is set to 'fail' 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED Message-Score: added 10 (spfValencePB) for SPF fail, total score for this message is now 0 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] [SPF] 192.237.132.24 <[email protected]> to: leesa@REDACTED [spam found] (SPF fail) [FW Associates Rackspace] -> /assp/spam/FW_TMP_Associates_Inc_Rackspace--4160149.eml; 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [TLS-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED [SMTP Error] 554 5.7.1 failed SPF: rackspace.com: 192.237.132.24 is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'ip4:192.237.132.24/31' matched) 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [SSL-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED finished message - received DATA size: 3.58 kByte - sent DATA size: 0 Byte 19-07-2017 14:37:47 m1-89467-06286 [Worker_7] [TLS-in] [SSL-out] 192.237.132.24 <[email protected]> to: leesa@REDACTED disconnected: session:7FB97C4C7410 192.237.132.24 - processing time 1 seconds Doug ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
