That sending IP is actually Salesforce as a vendor for Microsoft, sending through "Salesforce Marketing Cloud" aka ExactTarget. I've forwarded your email on to somebody there to ask them to find the right client contact and nudge them. (It's Microsoft-hosted DNS so Salesforce can't itself fix it.)
Based on how Salesforce recommends clients implement SPF records for Marketing Cloud, this would be "-all" if configured per usual. Cheers, Al Iverson On Thu, Oct 28, 2021 at 8:54 AM Johann Klasek via mailop <mailop@mailop.org> wrote: > > Has anyone else seen this from Microsoft sites? > > Recently, I stumbled over a rejection in our logs that came from a > Microsoft site with the source mta48.email.microsoftemail.com > [13.111.32.222]. The SPF entry of the from domain contains an "all" > which includes the entire Internet as permitted sender for such messages > ... probably not the actual intention of the SPF entry shown below: > > bounce.experience.microsoft.com. 3600 IN TXT "v=spf1 mx ip4:72.32.45.226 > ip4:72.32.45.228 ip4:72.32.45.235 ip4:72.32.45.240 ip4:72.32.45.234 > ip4:72.32.177.41 include:ksrinc.com include:cust-spf.exacttarget.com > include:confirmit.com all" > > I would expect to see something like "-all" or "~all" ... > > Perhaps Michael could forward this to the appropriate team in house. :) > > > Johann > > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop -- Al Iverson / Deliverability blogging at www.spamresource.com Subscribe to the weekly newsletter at wombatmail.com/sr.cgi DNS Tools at xnnd.com / (312) 725-0130 / Chicago (Central Time) _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
