On 8 Nov 2018, at 2:34, Poliman - Serwis wrote:
Honestly I don't fully understand this log. Looks like google mx says
that
some message from webmas...@kamir-transport.pl belong to ip
54.38.202.128
(what is 15 after ip address?) looks suspicious, although is send to
another mailbox in this same domain. But both mailboxes are hosted on
google, so why google mx mention something about not their ip?
Perhaps because it is an OVH IP and OVH is an open sewer of spam?
It's an unfortunate fact that if your hosting provider has a history of
accommodating spammers, others will treat you as a spammer by default.
OVH is such a hosting provider.
PS
SPF record configured in DNS zone looks like google advices -> v=spf1
include:_spf.google.com ~all
That SPF record probably should be supplemented with any non-Google
addresses that send messages claiming to be from that domain.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole