Re: SPF Record Issue

The ip it failed on is 24.38.11.30.

In fact, the helo host name doesn't resolve to this address.  Based on
what you mentioned in you previous post, I suppose this is the issue.

Received: from pmx1.unbeatablesale.biz (mmxr02.unbeatablesale.biz.
[24.38.119.30])
        by mx.google.com with ESMTP id z10si422023qas.154.1969.12.31.16.00.00;
        Mon, 09 Sep 2013 06:05:42 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does
not designate 24.38.119.30 as permitted sender)
client-ip=24.38.119.30;
Authentication-Results: mx.google.com;
       spf=hardfail (google.com: domain of [email protected]
does not designate 24.38.119.30 as permitted sender)
[email protected]


On Mon, Sep 9, 2013 at 12:48 PM, alan <[email protected]> wrote:
> At 17:10 09/09/2013  Monday, Roman Gelfand wrote:
>>Yep, you are right.  The domain name is unbeatablesale.com
>
> ok
> unbeatablesale.com      text = "v=spf1 ip4:98.136.0.0/14 ip4:24.187.208.80/29 ip4:24.38.11.24/29 ip4:108.58.151.0/29 -all"
>
> that is
> 98.136.0.0 - 98.136.196.255 (wow)
> 24.187.208.80 - 24.187.208.87
> 24.38.11.24 - 24.38.11.31
> 108.58.151.0 - 108.58.151.7
>
> now what ip is appearing to fail?
>
> as no there is no limit on the number of subnets other than the limits of how many text characters in a typical dns txt reply
> (you are way short of running into this limit thus not a concern)
>
> could you include the pass/fail output of whatever tester was in use?
>
> as it could be reporting not the failure of the spf check on the sender
> [email protected]
> but an spf fail on the domain in the sending systems helo-id (which is a separate test entirely)
>
>
>
>
>>On Mon, Sep 9, 2013 at 12:01 PM, Stuart Gathman <[email protected]> wrote:
>>> On 09/09/2013 11:52 AM, Roman Gelfand wrote:
>>>>
>>>> I have added the spf text record, below.  The first and second subnets
>>>> are being checked.  However, when sending email from 3rd and 4th
>>>> subnet, spf check fails.  Does this mean only 2 subnets could be
>>>> specified.  If so, what to when there is more subnets?
>>>>
>>>> v=spf1 ip4:xx.xxx.0.0/14 ip4:24.yy.yyy.yyy.80/29 ip4:zz.zz.zz.24/29
>>>
>>>    The second ip4 has 5 octets.   That MUST get PermErr for any IP (but
>>> whatever you are checking with may not be fully conformant.) On the other
>>> hand, that may just be a typo when obfuscating the record.  You are
>>> publishing the record in DNS, for crying out loud, so just give us the
>>> actual record.  Also, people sometimes have trouble with TXT records on
>>> their DNS host, so you should load the record into a test.yourdomain.com
>>> domain on the same DNS server you will be using for production.  Then we can
>>> check that it is actually served correctly.
>>>>
>>>> ip4:uuu.uu.uuu.0/29 -all
>>>
>>>
>>>
>>>
>>> -------------------------------------------
>>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>> Modify Your Subscription: http://www.listbox.com/member/
>>> [http://www.listbox.com/member/]
>>>
>>> Archives: https://www.listbox.com/member/archive/735/=now
>>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>>> Modify Your Subscription:
>>> https://www.listbox.com/member/?&
>>> Unsubscribe Now:
>>> https://www.listbox.com/unsubscribe/?&&post_id=20130909120211:2B4082F0-1969-11E3-B924-E2C56875045B
>>>
>>> Powered by Listbox: http://www.listbox.com
>>
>>
>>-------------------------------------------
>>Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>>
>>Archives: https://www.listbox.com/member/archive/735/=now
>>RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>>Modify Your Subscription: https://www.listbox.com/member/?&
>>Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909121059:682580A2-196A-11E3-AEC7-E0792EE61468
>>Powered by Listbox: http://www.listbox.com
>
>
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
> Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
> Archives: https://www.listbox.com/member/archive/735/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
> Modify Your Subscription: https://www.listbox.com/member/?&
> Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909124817:9E65463E-196F-11E3-9A41-BF4B57BB7C94
> Powered by Listbox: http://www.listbox.com