On Sun, 2007-02-25 at 17:23 -0800, Wayne Gregori wrote:
> I implemented SPF over the weekend and now Surgemail is
bouncing mail
> from my application server
>
> 25 16:58:51.00:-1225446480: spf: Going to block it
ip:64.81.241.226
> from:<deb-c jennypruitt.com>
> to:<ga-northatlanta-leave 360resource.net>
>
> my spf clears the entire class C
>
> v=spf1 ip4:64.81.241.0/24 -all
$ dig txt sfnet.com
sfnet.com. 86400 IN TXT "v=spf1
ip4:64.81.241.0/24 -all"
That's good. So any mail from sfnet.com delivered by
64.81.241.226 will
pass SPF. But that's not the question. Surgemail is looking
up SPF for
jennypruitt.com. There is no SPF entry for that domain.
Surgemail
creates a default SPF entry based on the MX, which is on a
separate
subnet. That is why SPF doesn't pass. You need to add an SPF
for each
domain that you will be sending from, not just the primary
domain of the
server.
Corey
|