Hi, to me it looks like email  
from=<communicati...@emails.aircanada.com><mailto:communicati...@emails.aircanada.com>
 to=<b...@othermx.com><mailto:b...@othermx.com>

Came in and was cleaned
Nov 17 11:13:00 mail MailScanner[9148]: Content Checks: Detected and have 
disarmed web bug, phishing tags in HTML message in 9202040121F2.A6CDC from 
communicati...@emails.aircanada.com<mailto:communicati...@emails.aircanada.com>
And requeued
Nov 17 11:13:00 mail MailScanner[9148]: Requeue: 9202040121F2.A6CDC to 
EEAA64012121

And rejected
Nov 17 11:13:02 mail postfix/smtp[9639]: EEAA64012121: 
to=<b...@othermx.com><mailto:b...@othermx.com>, 
relay=zeta.othermx.com[206.116.44.138]:25, delay=12, delays=10/0.01/1.3/0.33, 
dsn=5.7.1, status=bounced (host zeta.othermx.com[206.116.44.138] said: 550 
5.7.1 <b...@othermx.com><mailto:b...@othermx.com>: Recipient address rejected: 
Please see 
http://www.openspf.net/Why?s=mfrom;id=communications%40emails.aircanada.com;ip=209.53.201.252;r=zeta.othermx.com
 (in reply to RCPT TO command))
WHY ??
According to
http://www.openspf.org/Why?s=mfrom;id=communications%40emails.aircanada.com;ip=209.53.201.252;r=zeta.othermx.com

the MX of mxdove.com is mail.mxdove.com but mail.mxdove.com has no SPF entry 
that I can find.
Also From was @emails.aircanada.com and allowed IP’s are
p18.neolane.net.        1229    IN      TXT     "v=spf1 ip4:70.38.33.128/30 
ip4:70.38.36.40/30 ip4:174.142.154.200/30 ip4:174.142.245.174 
ip4:174.142.245.175 -all"
But the email came from mail.mxdove.com (209.53.201.252) according to the link 
above.

Your logs show it came from [70.38.36.41]

In short I think SPF checking looks only one hop back, and you want to relay, 
so you need to configure things for that.
Not sure I helped but I tried.


-ANGELO FAZZINA

UITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail

ang...@uconn.edu
University of Connecticut,  UITS, SSG, Server Systems
860-486-9075

Hi,

I just built a postfix mail server(mail.mytestmx.com) with PostfixAdmin, SPF 
and DKIM.,etc. It works very well. Now I try to use the new built server as the 
backup mail server of another server (zeta.othermx.com), so I add a backup 
domain in PostfixAdmin and setup DNS accordingly. Later there is an email came 
with destination to b...@othermx.com<mailto:b...@othermx.com>, the relay 
attempt got rejected at zeta.othermx.com because of SPF.

So what is the solution here? Should I add the mail.mytestmx.com to 
zeta.othermx.com's SPF record and make it trust it? If so are there any risk?


Reply via email to