can someone please review this port25 check auth tool response
I am in an argument about this FAILURE
> ==========================================================
> Summary of Results
> ==========================================================
> SPF check: fail
> DomainKeys check: pass
> DKIM check: pass
> Sender-ID check: fail
> SpamAssassin check: ham
>
> ==========================================================
> Details:
> ==========================================================
>
> HELO hostname: s53.gogvo.com
> Source IP: 12.97.188.229
> mail-from: aaron.m@gogvo.com
>
> ----------------------------------------------------------
> SPF check details:
> ----------------------------------------------------------
> Result: fail (not permitted)
> ID(s) verified: smtp.mail=aaron.m@gogvo.com
> DNS record(s):
> gogvo.com. 300 IN TXT "v=spf1 include:spf1.gogvo.com
> include:spf2.gogvo.com -all"
> gogvo.com. 300 IN TXT "v=spf2.0/pra include:2spf1.gogvo.com
> include:2spf2.gogvo.com -all"
> spf1.gogvo.com. 300 IN TXT "v=spf1 ip4:12.68.137.213
> ip4:12.204.164.198 ip4:12.204.164.163 ip4:12.204.164.52/29
> ip4:12.68.141.86/28 ip4:12.204.164.91/30 ip4:12.204.164.93/30
> ip4:12.204.164.92/30 ip4:12.68.140.17/32 -all"
> spf2.gogvo.com. 300 IN TXT "v=spf1 ip4:12.68.141.104 ip4:12.204.164.49
> ip4:12.204.164.86/26 ip4:12.68.140.10/28 ip4:12.97.188.200/29
> ip4:12.97.188.208/28 ip4:12.97.188.223/27 ip4:12.68.140.16
> ip4:12.68.140.18 ip4:12.132.193.241/30 ip4:12.132.193.245/29 -all"
From my understanding the -all statement is strictly enforcing anything in the spf record (include the include statements) and hard failing anything not defined here
am I understanding this incorrectly should I be using a ~all (because I do not want mail to originate from anything NOT found in my SPF or sender ID records
-Aaron
-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com
I am in an argument about this FAILURE
> ==========================================================
> Summary of Results
> ==========================================================
> SPF check: fail
> DomainKeys check: pass
> DKIM check: pass
> Sender-ID check: fail
> SpamAssassin check: ham
>
> ==========================================================
> Details:
> ==========================================================
>
> HELO hostname: s53.gogvo.com
> Source IP: 12.97.188.229
> mail-from: aaron.m@gogvo.com
>
> ----------------------------------------------------------
> SPF check details:
> ----------------------------------------------------------
> Result: fail (not permitted)
> ID(s) verified: smtp.mail=aaron.m@gogvo.com
> DNS record(s):
> gogvo.com. 300 IN TXT "v=spf1 include:spf1.gogvo.com
> include:spf2.gogvo.com -all"
> gogvo.com. 300 IN TXT "v=spf2.0/pra include:2spf1.gogvo.com
> include:2spf2.gogvo.com -all"
> spf1.gogvo.com. 300 IN TXT "v=spf1 ip4:12.68.137.213
> ip4:12.204.164.198 ip4:12.204.164.163 ip4:12.204.164.52/29
> ip4:12.68.141.86/28 ip4:12.204.164.91/30 ip4:12.204.164.93/30
> ip4:12.204.164.92/30 ip4:12.68.140.17/32 -all"
> spf2.gogvo.com. 300 IN TXT "v=spf1 ip4:12.68.141.104 ip4:12.204.164.49
> ip4:12.204.164.86/26 ip4:12.68.140.10/28 ip4:12.97.188.200/29
> ip4:12.97.188.208/28 ip4:12.97.188.223/27 ip4:12.68.140.16
> ip4:12.68.140.18 ip4:12.132.193.241/30 ip4:12.132.193.245/29 -all"
From my understanding the -all statement is strictly enforcing anything in the spf record (include the include statements) and hard failing anything not defined here
am I understanding this incorrectly should I be using a ~all (because I do not want mail to originate from anything NOT found in my SPF or sender ID records
-Aaron
-------------------------------------------
Sender Policy Framework: http://www.openspf.org [http://www.openspf.org]
Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
Archives: https://www.listbox.com/member/archive/1020/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1020/
Powered by Listbox: http://www.listbox.com