Re: SPF Record Issue

Note that the SPF record would allow 24.38.11.30, but the failing IP is 
24.38.119.30

Philip


On 9/9/13 1:00 PM, Roman Gelfand wrote:
> The ip it failed on is 24.38.11.30.
>
> In fact, the helo host name doesn't resolve to this address.  Based on
> what you mentioned in you previous post, I suppose this is the issue.
>
> Received: from pmx1.unbeatablesale.biz (mmxr02.unbeatablesale.biz.
> [24.38.119.30])
>          by mx.google.com with ESMTP id z10si422023qas.154.1969.12.31.16.00.00;
>          Mon, 09 Sep 2013 06:05:42 -0700 (PDT)
> Received-SPF: fail (google.com: domain of [email protected] does
> not designate 24.38.119.30 as permitted sender)
> client-ip=24.38.119.30;
> Authentication-Results: mx.google.com;
>         spf=hardfail (google.com: domain of [email protected]
> does not designate 24.38.119.30 as permitted sender)
> [email protected]
>
>
> On Mon, Sep 9, 2013 at 12:48 PM, alan <[email protected]> wrote:
>> At 17:10 09/09/2013  Monday, Roman Gelfand wrote:
>>> Yep, you are right.  The domain name is unbeatablesale.com
>> ok
>> unbeatablesale.com      text = "v=spf1 ip4:98.136.0.0/14 ip4:24.187.208.80/29 ip4:24.38.11.24/29 ip4:108.58.151.0/29 -all"
>>
>> that is
>> 98.136.0.0 - 98.136.196.255 (wow)
>> 24.187.208.80 - 24.187.208.87
>> 24.38.11.24 - 24.38.11.31
>> 108.58.151.0 - 108.58.151.7
>>
>> now what ip is appearing to fail?
>>
>> as no there is no limit on the number of subnets other than the limits of how many text characters in a typical dns txt reply
>> (you are way short of running into this limit thus not a concern)
>>
>> could you include the pass/fail output of whatever tester was in use?
>>
>> as it could be reporting not the failure of the spf check on the sender
>> [email protected]
>> but an spf fail on the domain in the sending systems helo-id (which is a separate test entirely)
>>
>>
>>
>>
>>> On Mon, Sep 9, 2013 at 12:01 PM, Stuart Gathman <[email protected]> wrote:
>>>> On 09/09/2013 11:52 AM, Roman Gelfand wrote:
>>>>> I have added the spf text record, below.  The first and second subnets
>>>>> are being checked.  However, when sending email from 3rd and 4th
>>>>> subnet, spf check fails.  Does this mean only 2 subnets could be
>>>>> specified.  If so, what to when there is more subnets?
>>>>>
>>>>> v=spf1 ip4:xx.xxx.0.0/14 ip4:24.yy.yyy.yyy.80/29 ip4:zz.zz.zz.24/29
>>>>     The second ip4 has 5 octets.   That MUST get PermErr for any IP (but
>>>> whatever you are checking with may not be fully conformant.) On the other
>>>> hand, that may just be a typo when obfuscating the record.  You are
>>>> publishing the record in DNS, for crying out loud, so just give us the
>>>> actual record.  Also, people sometimes have trouble with TXT records on
>>>> their DNS host, so you should load the record into a test.yourdomain.com
>>>> domain on the same DNS server you will be using for production.  Then we can
>>>> check that it is actually served correctly.
>>>>> ip4:uuu.uu.uuu.0/29 -all
>>>>
>>>>
>>>>
>>>> -------------------------------------------
>>>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>>> Modify Your Subscription: http://www.listbox.com/member/
>>>> [http://www.listbox.com/member/]
>>>>
>>>> Archives: https://www.listbox.com/member/archive/735/=now
>>>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>>>> Modify Your Subscription:
>>>> https://www.listbox.com/member/?&
>>>> Unsubscribe Now:
>>>> https://www.listbox.com/unsubscribe/?&&post_id=20130909120211:2B4082F0-1969-11E3-B924-E2C56875045B
>>>>
>>>> Powered by Listbox: http://www.listbox.com
>>>
>>> -------------------------------------------
>>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>>> Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>>>
>>> Archives: https://www.listbox.com/member/archive/735/=now
>>> RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>>> Modify Your Subscription: https://www.listbox.com/member/?&
>>> Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909121059:682580A2-196A-11E3-AEC7-E0792EE61468
>>> Powered by Listbox: http://www.listbox.com
>>
>>
>> -------------------------------------------
>> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>> Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>>
>> Archives: https://www.listbox.com/member/archive/735/=now
>> RSS Feed: https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
>> Modify Your Subscription: https://www.listbox.com/member/?&
>> Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909124817:9E65463E-196F-11E3-9A41-BF4B57BB7C94
>> Powered by Listbox: http://www.listbox.com
>
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
> Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
> Archives: https://www.listbox.com/member/archive/735/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/735/835710-69e7d341
> Modify Your Subscription: https://www.listbox.com/member/?&
> Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20130909130024:4E5D6DC2-1971-11E3-932D-84D22AAAEFF8
> Powered by Listbox: http://www.listbox.com
>