cancel
Showing results for 
Search instead for 
Did you mean: 

Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

zopatista
Hooked
Posts: 7
Thanks: 4
Registered: ‎17-08-2017

Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

I've recently reviewed my personal domain SPF record and switched it from using

include:madasafish.com

to

include:_spf-internal.plus.net include:_spf-internal2.plus.net

on advice found on the forums here.

I also have a DMARC record requesting that I get sent delivery summaries (rua=mailto:postmaster@[my domain]), and Google was so kind to tell me that it received legitimate, DKIM signed emails that I know I sent from IP addresses that are not in the plus.net SPF lists:

 

 

  <record>
    <row>
      <source_ip>212.227.126.135</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <!-- snip -->
  </record>
  <record>
    <row>
      <source_ip>212.227.126.131</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <!-- snip -->
  </record>

 

 

These were legitimate delivery attempts (signed cryptographically by my SMTP server with the correct DKIM key), but these two addresses, 212.227.126.131 and 212.227.126.135 are not listed in the plus.net spf-internal records, nor are they in the madasafish.com SPF records. Reverse DNS on these IP addresses gives me mout.kundenserver.de. for both.

 

Is there something misconfigured in the Plus.net relay setup?

 

Tags (2)
4 REPLIES 4
Townman
Superuser
Superuser
Posts: 24,072
Thanks: 10,229
Fixes: 176
Registered: ‎22-08-2007

Re: Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

Odd!  Those IP addresses are registered as belonging to 1&1.

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Baldrick1
Moderator
Moderator
Posts: 12,423
Thanks: 5,595
Fixes: 430
Registered: ‎30-06-2016

Re: Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

I don't know if it's connected with this problem but my Namesco spf record used to pass testing but now it fails.

spf4.png

 

Has spf1-internal.plus.net gone off line or is my record corrupted?

Moderator and Customer
If this helped - select the Thumb
If it fixed it,  help others - select 'This Fixed My Problem'

MisterW
Superuser
Superuser
Posts: 16,325
Thanks: 6,263
Fixes: 448
Registered: ‎30-07-2007

Re: Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

@Baldrick1 it should be _spf-internal.plus.net

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Baldrick1
Moderator
Moderator
Posts: 12,423
Thanks: 5,595
Fixes: 430
Registered: ‎30-06-2016

Re: Current _spf-internal.plus.net / _spf-internal2.plus.net SPF records incomplete?

Tnaks again, @MisterW 

I'm clearly unable to see the wood for the trees! Obviously total unconnected, all is now well. Sorry to have butted in!

Moderator and Customer
If this helped - select the Thumb
If it fixed it,  help others - select 'This Fixed My Problem'