Re: SPF Record Issue

At 17:10 09/09/2013  Monday, Roman Gelfand wrote:
>Yep, you are right.  The domain name is unbeatablesale.com

ok 
unbeatablesale.com      text = "v=spf1 ip4:98.136.0.0/14 ip4:24.187.208.80/29 ip4:24.38.11.24/29 ip4:108.58.151.0/29 -all"

that is
98.136.0.0 - 98.136.196.255 (wow)
24.187.208.80 - 24.187.208.87
24.38.11.24 - 24.38.11.31
108.58.151.0 - 108.58.151.7

now what ip is appearing to fail?

as no there is no limit on the number of subnets other than the limits of how many text characters in a typical dns txt reply
(you are way short of running into this limit thus not a concern)

could you include the pass/fail output of whatever tester was in use?

as it could be reporting not the failure of the spf check on the sender
[email protected] 
but an spf fail on the domain in the sending systems helo-id (which is a separate test entirely)




>On Mon, Sep 9, 2013 at 12:01 PM, Stuart Gathman <[email protected]> wrote:
>> On 09/09/2013 11:52 AM, Roman Gelfand wrote:
>>>
>>> I have added the spf text record, below.  The first and second subnets
>>> are being checked.  However, when sending email from 3rd and 4th
>>> subnet, spf check fails.  Does this mean only 2 subnets could be
>>> specified.  If so, what to when there is more subnets?
>>>
>>> v=spf1 ip4:xx.xxx.0.0/14 ip4:24.yy.yyy.yyy.80/29 ip4:zz.zz.zz.24/29
>>
>>    The second ip4 has 5 octets.   That MUST get PermErr for any IP (but
>> whatever you are checking with may not be fully conformant.) On the other
>> hand, that may just be a typo when obfuscating the record.  You are
>> publishing the record in DNS, for crying out loud, so just give us the
>> actual record.  Also, people sometimes have trouble with TXT records on
>> their DNS host, so you should load the record into a test.yourdomain.com
>> domain on the same DNS server you will be using for production.  Then we can
>> check that it is actually served correctly.
>>>
>>> ip4:uuu.uu.uuu.0/29 -all
>>
>>
>>
>>
>> -------------------------------------------
>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>> Modify Your Subscription: http://www.listbox.com/member/
>> [http://www.listbox.com/member/]
>>
>> Archives: https://www.listbox.com/member/archive/735/=now
>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>> Modify Your Subscription:
>> https://www.listbox.com/member/?&
>> Unsubscribe Now:
>> https://www.listbox.com/unsubscribe/?&&post_id=20130909120211:2B4082F0-1969-11E3-B924-E2C56875045B
>>
>> Powered by Listbox: http://www.listbox.com
>
>
>-------------------------------------------
>Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
>Archives: https://www.listbox.com/member/archive/735/=now
>RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>Modify Your Subscription: https://www.listbox.com/member/?&
>Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909121059:682580A2-196A-11E3-AEC7-E0792EE61468
>Powered by Listbox: http://www.listbox.com