Mailing List Archive: Testing ... default=FAIL

Testing ... default=FAIL

Oct 5, 2004, 11:30 PM

Post #1 of 5 (2088 views)

Hello:

I did a test and I get following line that says that fail. So how can I fix
it?

Testing 'all' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
default=FAIL

Thanks,

Andrew.

The full report is:

SPF lookup of sender andrewr@aabrothers.com.au from IP 216.14.197.15:

SPF string used: v=spf1 ip4:216.1.197.15 a ptr a:aabrothers.com.au
mx:aabrothers.com.au include:emailpro.com.au -all.

Processing SPF string: v=spf1 ip4:216.1.197.15 a ptr a:aabrothers.com.au
mx:aabrothers.com.au include:emailpro.com.au -all.

Testing 'ip4:216.1.197.15' on IP=216.14.197.15, target domain 216.1.197.15,
CIDR 32, default=PASS. No match.

Testing 'a' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
default=PASS. MATCH!

Testing 'ptr' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
default=PASS.

Testing 'a:aabrothers.com.au' on IP=216.14.197.15, target domain
aabrothers.com.au, CIDR 32, default=PASS.

Testing 'mx:aabrothers.com.au' on IP=216.14.197.15, target domain
aabrothers.com.au, CIDR 32, default=PASS.

Testing 'include:emailpro.com.au' on IP=216.14.197.15, target domain
emailpro.com.au, CIDR 32, default=PASS.

Testing 'all' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
default=FAIL.

Result: PASS

Known Issues:

None.

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Re: Testing ... default=FAIL [ In reply to ]

spf at metro

Oct 5, 2004, 11:44 PM

Post #2 of 5 (2044 views)

Permalink

Hi,

Could you please the next time include _all_ output, not just the one
line. It also might help to include the spf record you tested with.

Anyway, let's make some assumptions: your spf record is "v=spf1
ip4:216.1.197.15 a ptr a:aabrothers.com.au mx:aabrothers.com.au
include:emailpro.com.au -all"

the ip is 216.14.197.15.. so let's look at the spf record and see if we
can find the ip..

ip4:216.1.197.15 does match, so yes.. the result is PASS. My guess is
that you've used the particular test tool that shows the result for all
of the mechanisms in your spf record. Please copy the entire output of
the test tool so we can make more sense of this.

You might also want to check for redundancy. For example:

aabrothers.com.au. 2871 IN A 216.14.197.15

So you can leave out the ip4: part, since the a already matches that ip.
No doubt your record can be greatly simplified by checking these kinds
of redundancies.

Koen

On Wed, Oct 06, 2004 at 04:30:35PM +1000, Andrew Retzlaff - AABrothers Pty Ltd wrote:
> Hello:
>
>
>
> I did a test and I get following line that says that fail. So how can I fix
> it?
>
> Testing 'all' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
> default=FAIL
>
>
>
> Thanks,
>
> Andrew.
>
>
>
> The full report is:
>
>
>
> SPF lookup of sender andrewr@aabrothers.com.au from IP 216.14.197.15:
>
>
>
>
>
> SPF string used: v=spf1 ip4:216.1.197.15 a ptr a:aabrothers.com.au
> mx:aabrothers.com.au include:emailpro.com.au -all.
>
> Processing SPF string: v=spf1 ip4:216.1.197.15 a ptr a:aabrothers.com.au
> mx:aabrothers.com.au include:emailpro.com.au -all.
>
> Testing 'ip4:216.1.197.15' on IP=216.14.197.15, target domain 216.1.197.15,
> CIDR 32, default=PASS. No match.
>
> Testing 'a' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
> default=PASS. MATCH!
>
> Testing 'ptr' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
> default=PASS.
>
> Testing 'a:aabrothers.com.au' on IP=216.14.197.15, target domain
> aabrothers.com.au, CIDR 32, default=PASS.
>
> Testing 'mx:aabrothers.com.au' on IP=216.14.197.15, target domain
> aabrothers.com.au, CIDR 32, default=PASS.
>
> Testing 'include:emailpro.com.au' on IP=216.14.197.15, target domain
> emailpro.com.au, CIDR 32, default=PASS.
>
> Testing 'all' on IP=216.14.197.15, target domain aabrothers.com.au, CIDR 32,
> default=FAIL.
>
> Result: PASS
>
>
>
>
>
> Known Issues:
>
> None.
>
> -------
> Archives at http://archives.listbox.com/spf-help/current/
> Donate! http://spf.pobox.com/donations.html
> To unsubscribe, change your address, or temporarily deactivate your subscription,
> please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Re: Testing ... default=FAIL [ In reply to ]

nobody at xyzzy

Oct 6, 2004, 12:17 AM

Post #3 of 5 (2044 views)

Permalink

Koen Martens wrote:

> the ip is 216.14.197.15.. so let's look at the spf record
> and see if we can find the ip..

> ip4:216.1.197.15 does match, so yes.. the result is PASS.

Not here, 1 is not 14 in 216.14.197.15, hard to spot, I almost
missed it, but the test output helped:

[Andrew Retzlaff wrote:]
>> I did a test and I get following line that says that fail.
>> So how can I fix it?

There's nothing to fix, you got a PASS, the first match counts,
not the last match ("all" matches always, -all is always FAIL,
but you got a PASS long before this FAIL)

>> Testing 'ip4:216.1.197.15' on IP=216.14.197.15, target
>> domain 216.1.197.15, CIDR 32, default=PASS. No match.

1 is not 14, no match, continue:

>> Testing 'a' on IP=216.14.197.15, target domain
>> aabrothers.com.au, CIDR 32, default=PASS. MATCH!

Gotcha, final result is PASS, snipping some lines:

>> Result: PASS

Exit, that's it.

As Koen said you can simplify your policy. Bye, Frank

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

Re: Re: Testing ... default=FAIL [ In reply to ]

spf at metro

Oct 6, 2004, 5:19 AM

Post #4 of 5 (2049 views)

Permalink

On Wed, Oct 06, 2004 at 09:17:19AM +0200, Frank Ellermann wrote:
> Koen Martens wrote:
> > the ip is 216.14.197.15.. so let's look at the spf record
> > and see if we can find the ip..
>
> > ip4:216.1.197.15 does match, so yes.. the result is PASS.
>
> Not here, 1 is not 14 in 216.14.197.15, hard to spot, I almost
> missed it, but the test output helped:

yes, thanks for the correction, teaches me right for doing these quick
replies two minutes before i have to catch a train..

Koen

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

RE: Re: Testing ... default=FAIL [ In reply to ]

andrewr at aabrothers

Oct 13, 2004, 3:25 AM

Post #5 of 5 (2030 views)

Permalink

Hello Koen and Fran,

Thank you for the help.

Andrew.

-----Original Message-----
From: owner-spf-help@v2.listbox.com [mailto:owner-spf-help@v2.listbox.com]
On Behalf Of Koen Martens
Sent: Wednesday, 6 October 2004 10:19 PM
To: spf-help@v2.listbox.com
Subject: Re: [spf-help] Re: Testing ... default=FAIL

On Wed, Oct 06, 2004 at 09:17:19AM +0200, Frank Ellermann wrote:
> Koen Martens wrote:
> > the ip is 216.14.197.15.. so let's look at the spf record
> > and see if we can find the ip..
>
> > ip4:216.1.197.15 does match, so yes.. the result is PASS.
>
> Not here, 1 is not 14 in 216.14.197.15, hard to spot, I almost
> missed it, but the test output helped:

yes, thanks for the correction, teaches me right for doing these quick
replies two minutes before i have to catch a train..

Koen

--
K.F.J. Martens, Sonologic, http://www.sonologic.nl/
Networking, embedded systems, unix expertise, artificial intelligence.
Public PGP key: http://www.metro.cx/pubkey-gmc.asc
Wondering about the funny attachment your mail program
can't read? Visit http://www.openpgp.org/

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com

-------
Archives at http://archives.listbox.com/spf-help/current/
Donate! http://spf.pobox.com/donations.html
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-help@v2.listbox.com