Re: Configuration Problem

At 18:41 23/08/2013  Friday, you wrote:
>My domain is hosted by yahoo.  Outside of yahoo, I use another
>outbound mail server.
>
>My goal is to designate yahoo's smtp server and my outbound server as
>the only legitimate outbound server.
>
>My spf configuration is as follows:
>
>"v=spf1 a:smtp.bizmail.yahoo.com ip4:XX.XXX.XXX.XX -all"     where my
>server is XX.XXX.XXX.XX.
>
>This configuration works for my server but not yahoo.  I am guessing
>the problem is smtp.bizmail.yahoo.com cname.
>
>I spoke with yahoo..  They are not providing me with ip ranges or subnets.
>
>Is there a way to make this work or, perhaps, someone may have done
>this already.
>
>
>Thanks in advance

ok first issue is its yahoo and they seem to have a religious fear/hatred/revulsion/whatever for spf
so no help there

(i would take that as a sign that you would be better served paying to have your domain hosted elsewhere where they are more supportive of your use of your domain, even many of the free hosts do a better job)

that aside problem two is that
smtp.bizmail.yahoo.com is where you send mail too, not where they send it to us from

as you mentioned its a cname so a: will never work (ok it might but thats down to how the programmers wrote the spf library) 
either way the ip it eventually becomes is not the ip you send from (just the ip you submit your mail to)
(there may be 1 to infinity more hops through yahoos systems before its onward journey to the internet)

as you sent this mail from a gmail(and via gmail), and neglected to bother telling us the domain name in question

we can neither look at your spf records/domain/or sending ips to help any further

but as you have a gmail sending yourself a series of emails should result in a fair approximation of what ips they send from

then quick whois will tell you the block they belong to
then add ip4:that-block/bitmask for each block yahoo is discovered sending from 

terminate your record ?all till confident you have a 90%ish complete list
then switch to ~all so if/when yahoo add more your less likely to experience total failure (as you will with -all)