On 27/10/2020 09.54, Otto J. Makela via mailop wrote: > On 23/10/2020 23.42, John Levine wrote: >> In article <c01919bd-a259-7d58-5be6-cfb950f69...@iki.fi> you write: >>> When sending messages to a *.mail.protection.outlook.com host via IPv6, >>> our mail host gets the following email status: >>> >>> #4.7.26 SMTP; 450 4.7.26 Service does not accept messages sent over IPv6 >>> [2001:708:10:6004::22] unless they pass either SPF or DKIM validation >>> (message >>> not signed) (S825). [DB5EUR03FT043.eop-EUR03.prod.protection.outlook.com] >> >> FWIW, Gmail has had the same rule for a long time, all IPv6 mail must >> be validated with SPF or DKIM, so you're better off fixing whatever is >> wrong. >> >> Do you know what address it's trying to send mail from? It looks to me like >> your SPF record allows 2001:708:10:6004::22 and ::14 > > That's just it: as I said in my original message, the mail in this case is > coming from smtp.sdn.csc.fi [2001:708:10:6004::22]. > > I'm a bit at loss to what's wrong. Do they require SPF softfail instead > of neutral, that is, replace "?all" with "~all" in the record? If that's it, > pretty much a misuse of SPF, I'd say.
So, nobody has any further comments to the required hoops? I'm beginning to suspect the "either...or" in the message below should really be "both...and". Microsoft doesn't have anyone here? Remote Server returned '<wur-nl.mail.protection.outlook.com #4.7.26 SMTP; 450 4.7.26 Service does not accept messages sent over IPv6 [2001:708:10:6004::22] unless they pass either SPF or DKIM validation (message not signed) (S825). [AM5EUR03FT027.eop-EUR03.prod.protection.outlook.com]>' -- /* * * Otto J. Makela <o...@iki.fi> * * * * * * * * * */ /* Phone: +358 40 765 5772, ICBM: N 60 10' E 24 55' */ /* Mail: Mechelininkatu 26 B 27, FI-00100 Helsinki */ /* * * Computers Rule 01001111 01001011 * * * * * * */ _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop