On Sat, Sep 17, 2022 at 05:12:40PM +1000, li...@sbt.net.au wrote: > I have mail server on geko.sbt.net.au serving sbt.net.au as well as > several other TLD domains, > a while back using help from this list, some write ups and mxtoolbox as > means of verifying/testing I've set SPF/DKIM/DMARC (or so I thought...) > > as it seemed to pass all test I was able to run, I assumed it was set up > correctly, just now, noticed I get rejected from my own gmail address with > SPF/DKIM (1) (it was working OK in the past) > > checking with mxtoolbox: > > I get NO SPF for geko.sbt.net.au, I do get SPF for sbt.net.au > > what tools/website should I use to test/verify SPF/DKIM/DMARC ? > do I need SPF record for both mail host as well as domain ? > what else am I missing or stuffed up ? > > thanks for any pointers, hope I'm not too far off topic > > Voytek > > > (1) > Sep 16 13:04:55 geko postfix/smtp[2651]: BC9EB200534: to=<x...@gmail.com>, > relay=gmail-smtp-in.l.google.com[172.217.194.26]:25, delay=11, > delays=0.01/0.04/2/8.8, dsn=5.7.26, status=bounced (host > gmail-smtp-in.l.google.com[172.217.194.26] said: 550-5.7.26 This message > does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not > pass). SPF check for [sbt.net.au] does not pass with ip: 550-5.7.26 > [103.106.168.106].To best protect our users from spam, the message > 550-5.7.26 has been blocked. Please visit 550-5.7.26 > https://support.google.com/mail/answer/81126#authentication for more 550 > 5.7.26 information. p2-20020a170902e74200b00176a0d8780csi2398305plf.285 - > gsmtp (in reply to end of DATA command))
I can't see what's wrong. The IP address of the sending mail server is 103.106.168.106 which is listed in the SPF record for sbt.net.au. "v=spf1 ip4:103.106.168.106 ip4:103.106.168.105 ip4:125.168.124.3 include:_spf.google.com ~all" So unless you added ip4:103.106.168.106 to the SPF record after the bounce, I can't see what's wrong. Maybe someone else will. The sending server doesn't require its own SPF record. That's just for the domain used in the envelope address (sbt.net.au). There are lots of mail testing sites, e.g.: https://mail-tester.com https://mailtester.com https://www.mailgenius.com https://www.mailreach.co/mail-tester-alternative I've only used the first one. cheers, raf
