Re: Wacky SPF Policy

a the mails in this listing are from
<[email protected]>

to
<[email protected]>
<[email protected]>

so why are you blaming pobox.com ???

its the server for eastmeadow.k12.ny.us that is tempfailing the mails in your queue
(it is using an old canned response that directs you at http script on pobox that provides human readable spf errors, their only involvement)

according to the errors the connections came from 65.254.18.67
(is this your servers that these 453 errors are being recieved by)

if so the spf for 
WPI.EDU
is
"v=spf1 ip4:130.215.36.91 ip4:130.215.5.39 ip4:66.151.109.16 ip4:209.235
.101.208/28 ip4:139.146.131.244/30 ip4:139.146.143.184/29 ip4:139.146.131.249/29
 ip4:139.146.146.128/25 ip4:139.146.160.0/25 ip4:70.251.178.128/28 ip4:64.34.25.
64/27 ip4:206.107.42.254 ip4:206.107.43.223 include:enomia.com ip4:206.72.127
.0/24 -all"

including
"v=spf1 mx ip4:64.128.160.111 ip4:64.128.160.112 -all"

including the mxs (why does anyone use mx???)
64.128.160.11, 64.128.160.12
especially as these mx's have both the same 2 ips????

absolutely none of these have the ip 65.254.18.67

now the other possibility is the dumbass owner of 65.254.18.67 is receiving this message and sending NDR backscatter to you in which case you just blacklist the ip from sending you backscatter

but how you would see mentions of this in a log format i cannot guess


At 21:59 05/02/2014  Wednesday, Alex van den Bogaerdt wrote:
>>I was directed by a young whippersnapper at the pobox help desk to sign up on
>>the SPF mailing list to learn something about it.  He offered the comment that
>>pobox invented SPF (so there!).
>>
>>I had complained to them about this mail stalling in my outbound server:
>>
>>-----Q-ID----- --Size-- -Priority- ---Q-Time--- --------Sender/Recipient--------
>>s15Dbwo2018764      250    1290946+Feb  5 08:37 <[email protected]>
>>                (Deferred: 453 Please see http://spf.pobox.com/[email protected]&ip=65.254.18.67)
>><[email protected]>
>>(Deferred: 453 Please see http://spf.pobox.com/[email protected]&ip=65.254.18.67)
>>s15DtnEW027481      501    1291256+Feb  5 08:55 <[email protected]>
>>                (Deferred: 453 Please see http://spf.pobox.com/[email protected]&ip=65.254.18.67)
>><[email protected]>
>>(Deferred: 453 Please see http://spf.pobox.com/[email protected]&ip=65.254.18.67)
>
>You say this is your email queue, and pobox says it is contacted from IP address 65.254.18.67 .
>If both are correct, then the email policy as published by wpi.edu is to NOT authorize this message.
>Reason: you are sending from 65.254.18.67 which is not authorized in the wpi.edu policy.
>
>Did I miss anything relevant from your message perhaps?
>
>Alex
>
>
>
>-------------------------------------------
>Sender Policy Framework: http://www.openspf.net [http://www.openspf.net]
>Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/]
>
>Archives: https://www.listbox.com/member/archive/735/=now
>RSS Feed: https://www.listbox.com/member/archive/rss/735/13124949-ec5a0568
>Modify Your Subscription: https://www.listbox.com/member/?&
>Unsubscribe Now: https://www.listbox.com/unsubscribe/?&&post_id=20140205165915:CE4544EC-8EB0-11E3-94FA-8E05D9E05B5A
>Powered by Listbox: http://www.listbox.com