View Single Post
Old 4 Aug 2021, 10:18 PM   #1
Jacinto
Essential Contributor
 
Join Date: Jun 2009
Posts: 395
Problems with FastMail's SPF Records

Good day.

Fastmail is not the DNS host for my domain. However, my domain's SPF RR were set, as follows:

Code:
"v=spf1 include:spf.messagingengine.com include:zoho.com -all"
Yesterday, one of my outgoing messages sent via FM's SMTP servers bounced with the following error message:
Quote:
<[REDACTED] AT support.localphone.com>: host mx1.localphone.com[94.75.247.1] said:
550 [SPF] 64.147.123.30 is not allowed to send mail from [MYDOMAIN]. (in
reply to RCPT TO command)
I resent the same message this morning and it bounced, again, with the following error message:
Quote:
<[REDACTED] AT support.localphone.com>: host mx1.localphone.com[94.75.247.1] said:
550 [SPF] 66.111.4.226 [DIFFERENT IP ADDRESS] is not allowed to send mail from [MYDOMAIN]. (in reply to RCPT TO command)
I added "ip4:66.111.4.226/32" to my domain's SPF RR, waited for the change to propagate, and resent the same message. To my surprise, it bounced a third time with the following error message:
Quote:
<[REDACTED] AT support.localphone.com>: host mx1.localphone.com[94.75.247.1] said:
550 [SPF] 66.111.4.223 [DIFFERENT IP ADDRESS] is not allowed to send mail from [MYDOMAIN]. (in reply to RCPT TO command)
This time, I changed "ip4:66.111.4.226/32" to "ip4:66.111.4.0/24",, waited for the change to propagate, and resent the same message. This time it went through.

My domain's SPF RR now are:
Code:
"v=spf1 ip4:66.111.4.0/24 include:spf.messagingengine.com include:zoho.com -all"
I was under the impression that "include:spf.messagingengine.com" would cover all FM's SMTP servers, but it doesn't.

Also, adding "ip4:66.111.4.0/24" is not going to work with the offending SMTP server in the first bounce message (64.147.123.30).

What am I missing?

Thank you.

--
Jacinto
Jacinto is offline   Reply With Quote