SPF Failures

[LawsHosting]

Came across this post very ( http://www.directadmin.com/forum/showthread.php?t=5336 ), we are getting the same results.

Since we do not use our box's as DNS/NS, we add a TXT record at our external NS's (exactly as shown from within DA's template) - however it still soft fails to GMail - whether we use the server IP or the virtual IP, both still soft fail

Any ideas?

 

[nobaloney]

Help us help you. Domain name please.

Jeff

 

[LawsHosting]

In my sig, thats one

 

[scsi]

You should look at the mail headers to make sure it sent from the ips in your allow list.

The only ips you are allowing are: 178.32.50.252 188.165.208.43 and your mx which is google. If it comes from any other ip it will be a softfail.

Check:

http://old.openspf.org/wizard.html?mydomain=laws-hosting.co.uk&submit=Go!

http://en.wikipedia.org/wiki/Sender_Policy_Framework

 

[LawsHosting]

So I need to add a TXT entry for each Google MX (IP) record? Thats why it soft fails?

I just tried one of my other domains, that passed, I only have one MX record on it.

 

[ditto]

If it helps you, here are what the SPF I use in DirectAdmin for my users that is using GoogleApps:

"v=spf1 a mx ip4:***.***.***.*** include:_spf.google.com ?all"

Of course, change ***.***.***.*** with your server IP.

You should not add a TXT entry for each Google MX (IP) record.

Also please note that I have changed ~ to be ? at the end of the SPF. Both will work without problems, but ? is more flexible as it allows you to send email from another ISP SMTP.

 

[LawsHosting]

Ok, it is too strict. The from email must match the Return-Path to pass! So if you have eg. webmaster@ sent through the support@ account, it'll soft-fail.

 

[nobaloney]

Ok, it is too strict.

What is too strict?

Jeff

 

[Richard G]

So if you have eg. webmaster@ sent through the support@ account, it'll soft-fail.

No it won't, because SPF reacts on domain name, not on username.