On Thu, Aug 28, 2025 at 10:36:57PM +0100, Richard Clayton via mailop wrote:
> In message <CAEO096qsQ78KQJxz06bhoJCQ-7Vd7pkkHwhRu5duL-hm- > r+...@mail.gmail.com>, Mark Fletcher via mailop <mailop@mailop.org> > writes > > > Funny, I was just looking at an issue where someone sending from > > GSuite was using 74.125.224.52, which also doesn't have a PTR > > record. > > Someone is using 74.125.224.41 .. 104 as of a couple of days ago. I have > been assuming it is Google (and they forgot about the reverse DNS) since > the EHLO is convincing (well, anyone can do that) and the range is > covered by their SPF settings ... > > ... mind you the range is not listed at > > https://support.google.com/a/answer/60764?hl=en Well, the SPF RRs list: 2001:4860:4000::/36 2404:6800:4000::/36 2607:f8b0:4000::/36 2800:3f0:4000::/36 2a00:1450:4000::/36 2c0f:fb50:4000::/36 172.217.0.0/19 172.217.32.0/20 172.217.128.0/19 172.217.160.0/20 172.217.192.0/19 172.253.56.0/21 172.253.112.0/20 108.177.96.0/20 ---> 74.125.0.0/16 173.194.0.0/16 209.85.128.0/17 216.58.192.0/19 216.239.32.0/19 So the range is actually covered. The /24 in question has some PTRs: 1.224.125.74.in-addr.arpa. IN PTR nuq04s18-in-f1.1e100.net. ... consecutive through to ... 31.224.125.74.in-addr.arpa. IN PTR nuq04s18-in-f31.1e100.net. 96.224.125.74.in-addr.arpa. IN PTR lax02s19-in-f0.1e100.net. ... consecutive through to ... 127.224.125.74.in-addr.arpa. IN PTR lax02s19-in-f31.1e100.net. With NXDOMAIN from 32 through 95. -- Viktor. 🇺🇦 Слава Україні! _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
