Re: [mlmmj] Problems with spam filters

[email protected] (Martin Brampton), 2020.10.11 (Sun) 21:25 (CEST):
> Thanks. I don't understand why your rspamd says black-sheep-research.com has
> no valid SPF.

Because the IP of the sending server (mlmmj list server at
198.101.246.47) is not in the SPF-published "allowed sender" IP list:

$ echo black-sheep-research.com | smtpctl spf walk
79.79.41.36
164.90.179.118
45.55.101.18
205.201.128.0/20
198.2.128.0/18
148.105.8.0/21
207.58.142.208/29
207.58.147.64/28
216.22.15.224/27
43.228.184.0/22
103.47.204.0/22
103.36.108.0/22
103.2.140.0/22
203.31.36.0/22
66.128.144.88/29
198.74.56.28

(smtpctl ist a tool on OpenBSD)

Marcus
 
> Your "digs" show that it has an include for yorkshiremail.com, which in turn
> specifies both my own mail server (mx.yorkshiremail.com) and smpt2go.com
> which is the mail relay that I use for general mail sending.
> 
> Where is there an SPF problem?
> 
> I don't either understand why your rspamd doesn't like the DKIM signature
> added by the mail relay (smtp2go.com) if that is what it is complaining
> about.
> 
> 
> On 11/10/2020 15:55, Marcus MERIGHI wrote:
> > SPF does not go along too well with traditional mailing lists:
> > (thats why more and more mailing lists rewrite the From:)
> > 
> > $ dig +short black-sheep-research.com mx
> > 100 mx.yorkshiremail.com.
> > 
> > $ dig +short black-sheep-research.com txt
> > "v=spf1 include:yorkshiremail.com ~all"
> > 
> > $ dig +short yorkshiremail.com mx
> > 100 mx.yorkshiremail.com.
> > 
> > $ dig +short mx.yorkshiremail.com
> > 164.90.179.118
> > 
> > $ dig +short yorkshiremail.com txt
> > "v=spf1 a ip4:79.79.41.36 ip4:164.90.179.118 include:spf.smtp2go.com include:servers.mcsv.net ?all"
> > 
> > ... but I get your mail, via the mlmmj list from this IP:
> > 
> > Received: from adhara.zumppe.net (adhara.zumppe.net [198.101.246.47])
> > 
> > This is why my rspamd gives your mail 3 spammy points:
> > 
> > R_DKIM_REJECT(1.00)[smtpcorp.com:s¡-4,black-sheep-research.com:s=s151337];
> > DMARC_POLICY_REJECT(2.00)[black-sheep-research.com : No valid SPF,reject];