fcc.gov DNS SPF record broken
Mukund Sivaraman via NANOG <[email protected]>
| Newsgroups | gmane.org.operators.nanog |
|---|---|
| Message-ID | <aa8Z5dgMCT1mL6kC@p5> |
If any DNS admins at FCC.gov are reading this message, would you please look at the following issue? I filed a servicenow ticket with FCC, but it was resolved with an unrelated resolution that they received payment, so I'm mentioning it here so that someone looks at it. FCC licensing requires a valid email address to be maintained with them; due to an incorrect SPF configuration for fcc.gov, emails can be rejected by recepient MTAs which check SPF such as: Mar 7 14:47:57 mx postfix/smtpd[9936]: NOQUEUE: reject: RCPT from mail-westusazlp170110001.outbound.protection.outlook.com[2a01:111:f403:c001::1]: 550 5.7.24 <[email protected]>: Recipient address rejected: Message rejected due to: SPF Permanent Error: No valid SPF record for included domain: spf-0024ed01.pphosted.com: include:spf-0024ed01.pphosted.com. Please see http://www.openspf.net/Why?s=mfrom;[email protected];ip=2a01:111:f403:c001::1;r=mukund.org; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<BY5PR09CU001.outbound.protection.outlook.com> [muks@p5 ~]$ dig -t TXT spf-0024ed01.pphosted.com ; <<>> DiG 1.99.10.19700101000000.000000000 <<>> -t TXT spf-0024ed01.pphosted.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29973 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;spf-0024ed01.pphosted.com. IN TXT ;; AUTHORITY SECTION: pphosted.com. 10 IN SOA ns1.proofpoint.com. ops.proofpoint.com. 2026211855 1200 120 2419200 600 ;; Query time: 3 msec ;; SERVER: 172.17.5.4#53(172.17.5.4) ;; WHEN: Mon Mar 09 19:01:35 GMT 2026 ;; MSG SIZE rcvd: 109 [muks@p5 ~]$ Mukund _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/X3P6W7GYVLZASFYKWXP3RA6Z34KRGZKM/