OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: problem with Yahoo, msn and others

From: Robert Felber (r.felberek-muc.de)
Date: Thu Apr 19 2007 - 05:49:48 CDT


On Thu, Apr 19, 2007 at 12:01:56PM +0200, Nikoh wrote:
> Hi to all,
> This is the first time that I write, sorry for my bad English and for my "ignorance" ;)
> I have a business server mail; from some days my customers can't send emails to yahoo, msn and others
> servers...with google, i see that the problem could be the spf record.
> Someone in this list can help me to understand?

If I understand you correctly:
    a) you provide a mail service
    b) Your customers want to send mail with the sender address
        usergmail.com to MSN and Hotmail users.
    c) they want to send that mail via your E-Mail Service

Your Problem might indeed be, that gmail has SPF records set and do not
list you as permitted sender.

Gmail has following SPF records:

% host -t TXT gmail.com
gmail.com descriptive text "v=spf1 redirect=_spf.google.com"

% host -t TXT _spf.google.com
_spf.google.com descriptive text "v=spf1 ip4:216.239.56.0/23 ip4:64.233.160.0/19 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ?all"

Those IPs are marked as valid sender. ?all indicates, that other MTAs which send
mail as gmail.com shall pass because from
http://www.openspf.org/SPF_Record_Syntax:

 Result Explanation Intended Action
 Normal The SPF record specifies explicitly that pass
          nothing can be said about validity

However, nobody knows (as you didn't provide Failure Reasons produced by
MSN / Hotmail) what exact the cause is. It MAY be that MSN doesn't interpret
SPF records correctly.

Thus - provide logs, provide reject/bounce/DSN messages.

 

--
    Robert Felber (PGP: 896CF30B)
    Munich, Germany