Re: SPF Record Issue

I can see this is resolved, just my 2c :

98.136.0.0 - 98.136.196.255 (wow) is actually :
98.136.0.0 - 98.139.255.255 (WOW - big one)

My recommendation actually is to us ~all temporary, keep it for some time
until you find what really need, then make better definition and revert to
-all

Also, if you are using huge block because of big ISP dynamic IP range, I
am almost sure you can made it smaller, or use reverse like I did (with
some dynamic dns). Keep in mind that IP4 should be on line start and
something ugly like I did at end, I have dynamic IP, check mine as
example. I mean : mine is ugly because of dynamic dns and 60 sec :)

Regards,
Dejan

-----Original Message-----
From: alan <[email protected]>
To: [email protected]
Date: Mon, 09 Sep 2013 17:48:06 +0100
Subject: Re: [spf-discuss] SPF Record Issue

> At 17:10 09/09/2013  Monday, Roman Gelfand wrote:
> >Yep, you are right.  The domain name is unbeatablesale.com
> 
> ok 
> unbeatablesale.com      text = "v=spf1 ip4:98.136.0.0/14
> ip4:24.187.208.80/29 ip4:24.38.11.24/29 ip4:108.58.151.0/29 -all"
> 
> that is
> 98.136.0.0 - 98.136.196.255 (wow)
> 24.187.208.80 - 24.187.208.87
> 24.38.11.24 - 24.38.11.31
> 108.58.151.0 - 108.58.151.7
> 
> now what ip is appearing to fail?
> 
> as no there is no limit on the number of subnets other than the limits
> of how many text characters in a typical dns txt reply
> (you are way short of running into this limit thus not a concern)
> 
> could you include the pass/fail output of whatever tester was in use?
> 
> as it could be reporting not the failure of the spf check on the sender
> [email protected] 
> but an spf fail on the domain in the sending systems helo-id (which is
> a separate test entirely)
> 
> 
> 
> 
> >On Mon, Sep 9, 2013 at 12:01 PM, Stuart Gathman <[email protected]>
> wrote:
> >> On 09/09/2013 11:52 AM, Roman Gelfand wrote:
> >>>
> >>> I have added the spf text record, below.  The first and second
> subnets
> >>> are being checked.  However, when sending email from 3rd and 4th
> >>> subnet, spf check fails.  Does this mean only 2 subnets could be
> >>> specified.  If so, what to when there is more subnets?
> >>>
> >>> v=spf1 ip4:xx.xxx.0.0/14 ip4:24.yy.yyy.yyy.80/29 ip4:zz.zz.zz.24/29
> >>
> >>    The second ip4 has 5 octets.   That MUST get PermErr for any IP
> (but
> >> whatever you are checking with may not be fully conformant.) On the
> other
> >> hand, that may just be a typo when obfuscating the record.  You are
> >> publishing the record in DNS, for crying out loud, so just give us
> the
> >> actual record.  Also, people sometimes have trouble with TXT records
> on
> >> their DNS host, so you should load the record into a
> test.yourdomain.com
> >> domain on the same DNS server you will be using for production. 
> Then we can
> >> check that it is actually served correctly.
> >>>
> >>> ip4:uuu.uu.uuu.0/29 -all
> >>
> >>
> >>
> >>
> >> -------------------------------------------
> >> Sender Policy Framework: http://www.openspf.net
> [http://www.openspf.net]
> >> Modify Your Subscription: http://www.listbox.com/member/
> >> [http://www.listbox.com/member/]
> >>
> >> Archives: https://www.listbox.com/member/archive/735/=now
> >> RSS Feed:
> https://www.listbox.com/member/archive/rss/735/24896328-acfdfa29
> >> Modify Your Subscription:
> >> https://www.listbox.com/member/?&
> >> Unsubscribe Now:
> >>
> https://www.listbox.com/unsubscribe/?&&post_id=20130909120211:2B4082F0-
> 1969-11E3-B924-E2C56875045B
> >>
> >> Powered by Listbox: http://www.listbox.com
> >
> >
> >-------------------------------------------
> >Sender Policy Framework: http://www.openspf.net
> [http://www.openspf.net]
> >Modify Your Subscription: http://www.listbox.com/member/
> [http://www.listbox.com/member/]
> >
> >Archives: https://www.listbox.com/member/archive/735/=now
> >RSS Feed:
> https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
> >Modify Your Subscription: https://www.listbox.com/member/?&
> >Unsubscribe Now:
> https://www.listbox.com/unsubscribe/?&&post_id=20130909121059:682580A2-
> 196A-11E3-AEC7-E0792EE61468
> >Powered by Listbox: http://www.listbox.com
> 
> 
> 
> -------------------------------------------
> Sender Policy Framework: http://www.openspf.net
> [http://www.openspf.net]
> Modify Your Subscription: http://www.listbox.com/member/
> [http://www.listbox.com/member/]
> 
> Archives: https://www.listbox.com/member/archive/735/=now
> RSS Feed:
> https://www.listbox.com/member/archive/rss/735/1954667-c27b5fc5
> Modify Your Subscription:
> https://www.listbox.com/member/?&
> 7b77b
> Unsubscribe Now:
> https://www.listbox.com/unsubscribe/?&
> 7-b8af911c&post_id=20130909124817:9E65463E-196F-11E3-9A41-BF4B57BB7C94
> Powered by Listbox: http://www.listbox.com