SPF issue Tommy
    SPF issue Synametrics Support
        SPF issue Tommy
        SPF issue Tommy
            SPF issue Synametrics Support

From: Tommy
Date: 3/21/23 5:22 AM
Topic: SPF issue
Type: General Discussions
Post a follow up

For the domain with too long TXT entry,xeams will has problem.

For example:

Domain: icbc.com.cn

Final SPF result is: v=spf1 ip4:202.108.88.4/32 ip4:219.142.91.4/32 ip4:60.247.99.195/32 ip4:123.127.121.195/32 ip4:202.108.88.10/32 ip4:123.127.121.225/32 ip4:219.142.91.28/32 ip4:60.247.99.225/32 ip4:218.205.182.36/32 ip4:61.129.111.231/32 ip4:140.206.54.231/32 ip4:180.169.80.231/32 ip4:211.95.81.231/32 ip4:117.131.126.189/32 ip4:117.184.157.231/32 ip4:116.236.244.245/32 ip4:58.246.164.245/32 ip4:180.169.119.220/32 ip4:112.64.230.220/32 ip4:120.204.111.220/32 ip4:117.131.49.220/32 -all

But Xeams only return: v=spf1 ip4:202.108.88.4/32 ip4:219.142.91.4/32 ip4:60.247.99.195/32 ip4:123.127.121.195/32 ip4:202.108.88.10/32 ip4:123.127.121.225/32 ip4:219.142.91.28/32 ip4:60.247.99.225/32 ip4:218.205.182.36/32

That case SPF fail result.

X-SM_EnvelopeFrom: webmaster@icbc.com.cn
X-SM_SENDER_IP: 61.129.111.231
X-SM_ReverseDNS: icbc.com.cn tns1.icbc.com.cn cns2.icbc.com.cn bjtns2.icbc.com.cn shuni.icbc.com.cn shtns.icbc.com.cn ns114.icbc.com.cn
X-SM_HeloStrInEnvelope: EHLO icbc.com.cn

Top

From: Synametrics Support
Date: 3/21/23 8:26 AM
Topic: SPF issue
Type: General Discussions
Post a follow up

We are not able to recreate this problem. Could you please contact us via email and send us the sample message from this domain using the method mentioned on https://www.xeams.com/forward-sample-to-support.htm

Top

From: Tommy
Date: 3/21/23 9:23 AM
Topic: SPF issue
Type: General Discussions
Post a follow up

 Maybe it is google DNS issue(8.8.8.8),I will change to be other nameserver to further debug

Top

From: Tommy
Date: 3/21/23 9:35 AM
Topic: SPF issue
Type: General Discussions
Post a follow up

What is the result at SPF Wizard>>Verify SPF Record

If you input below value:

SPF Record: v=spf1 include:spf.icbc.com.cn -all
Email Address: webmaster@icbc.com.cn
Sending host IP: 61.129.111.231

Mine is as below:

SPF Query Result

SPF - fail(icbc.com.cn does not authorize 61.129.111.231 as an allowable sender.


SPF Query Processing Data


SPF Mechanism: include mechanism found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 202.108.88.4 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 219.142.91.4 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 60.247.99.195 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 123.127.121.195 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 202.108.88.10 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 123.127.121.225 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 219.142.91.28 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 60.247.99.225 to 61.129.111.231
SPF : None Match Found

SPF Mechanism: ip4 mechanism found
SPF : Matching IP Address 218.205.182.36 to 61.129.111.231
SPF : None Match Found
SPF Mechanism: all mechanism found and result evaluated was -


SPF Query DNS Lookup Data

DNS Lookup Performed type was TXT; against : spf.icbc.com.cn
DNS Result: v=spf1 ip4:202.108.88.4/32 ip4:219.142.91.4/32 ip4:60.247.99.195/32 ip4:123.127.121.195/32 ip4:202.108.88.10/32 ip4:123.127.121.225/32 ip4:219.142.91.28/32 ip4:60.247.99.225/32 ip4:218.205.182.36/32

 

Top

From: Synametrics Support
Date: 3/21/23 10:02 AM
Topic: SPF issue
Type: General Discussions
Post a follow up

There are two versions of SPF lookups in Xeams: A debug version and a non-debug version. The debug version is designed to give details about every mechanism, and the depth is hard-coded at 20. This causes a problem when using the SPF Verify feature since the depth is set to 20.

This debug version is NOT used when emails come in. Therefore, if you run the Simulator on a message that arrives from this IP, SPF will pass.

 

Top