Maybe it was a temporary issue? Right now I only see one entry -
dig paypal.com txt | findstr "spf" paypal.com. 3444 IN TXT "v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all" -joe On 5/20/2021 at 6:10 AM, "Javier Angulo via mailop" <mailop@mailop.org> wrote: > >Hi, > >I wonder if somebody is having problems with paypal.com on the >receiving >side (or maybe someone from paypal can help). > >We are rejecting what seems to be legit messages from paypal >employees >because: >- They have a p=reject DMARC record >- DKIM check fails (body has been altered) >- paypal.com has 2 SPF records: > >$ dig txt paypal.com +short >... >"v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com >include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com >include:3ph4._spf.paypal.com include:3ph5._spf.paypal.com ~all" >"v=spf1 include:aspmx.pardot.com ~all" > >So at least IMHO a single SPF record should be used. > >Cheers, >Javier >_______________________________________________ >mailop mailing list >mailop@mailop.org >https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop