<div dir="ltr">Hi, Jules -<div><br></div><div>There's still a problem with the SPF record for the <a href="http://zend.to" target="_blank">zend.to</a> domain I'm afraid…</div><div><br></div><div>We're seeing messages arriving from IPv6 addresses, which aren't listed in your SPF record and so are not generating SOFTFAIL results for SPF checks.</div><div><br></div><div>For example a message at 12:42 had this Received header</div><div><br></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><div>Received: from <a href="http://falcon.ecs.soton.ac.uk">falcon.ecs.soton.ac.uk</a> (<a href="http://falcon.ecs.soton.ac.uk">falcon.ecs.soton.ac.uk</a>. [2001:630:d0:f102::25e])</div></div><div><div> by <a href="http://mx.google.com">mx.google.com</a> with ESMTPS id vg1si10581610wjb.19.2016.11.11.06.42.24</div></div><div><div> (version=TLS1 cipher=AES128-SHA bits=128/128);</div></div><div><div> Fri, 11 Nov 2016 06:42:24 -0800 (PST)</div></div></blockquote><div><br></div><div>showing Google had received it from [2001:630:d0:f102::25e]</div><div><br></div><div>The MX option in your SPF record picks up the various IPv6 addresses of your site's <u style="font-weight:bold">inbound</u> mail servers, but I guess [2001:630:d0:f102::25e] is an outbound-only server so doesn't have MX records point to it, hence doesn't get included in the SPF data.</div><div><br></div><div>You need to list the IP addresses/netblocks of all your outbound servers in the SPF record for <a href="http://zend.to">zend.to</a></div><div><br></div><div>In passing (and the IT staff might already know) the SPF record for your main <a href="http://soton.ac.uk">soton.ac.uk</a> domain is right at the maximum number of DNS lookups SPF permits: 10. I hope no-one adds and more entries requiting lookups to it!</div><div><br></div><div>Cheers,</div><div>Mike B-)</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 11 November 2016 at 11:24, Jules <span dir="ltr"><<a href="mailto:Jules@zend.to" target="_blank">Jules@zend.to</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
I've just added an SPF record for the domain.<br>
Any thoughts on fixing the "on behalf of" issue?<br>
<br>
Thanks!<br>
Jules.<div><div class="h5"><br>
<br>
<div class="m_2849635567719331640moz-cite-prefix">On 11/11/2016 09:16, Stewart Campbell
wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div class="m_2849635567719331640WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">I
sent an email regarding this a while ago. Domains that have
SPF/DKIM/DMARC set up will have problems even sending mail
to this list as it sends all list emails ‘on behalf of’ the
sender. My domain does not have this list in its SPF record
so it will fail.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif" lang="EN-US">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif" lang="EN-US"> <a class="m_2849635567719331640moz-txt-link-abbreviated" href="mailto:zendto-bounces@zend.to" target="_blank">zendto-bounces@zend.to</a>
[<a class="m_2849635567719331640moz-txt-link-freetext" href="mailto:zendto-bounces@zend.to" target="_blank">mailto:zendto-bounces@zend.to</a><wbr>]
<b>On Behalf Of </b>Mike Brudenell<br>
<b>Sent:</b> 11 November 2016 09:08<br>
<b>To:</b> ZendTo Users <a class="m_2849635567719331640moz-txt-link-rfc2396E" href="mailto:zendto@zend.to" target="_blank"><zendto@zend.to></a><br>
<b>Subject:</b> [ZendTo] A head's up about the mailing list<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Just a head's up to the person/people who
run the mailing list…<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">For the past few months Google are now
flagging all messages form the list with a a red "this
message is a little suspicious" question mark indicator
because there's no valid SPF or DKIM for it.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">It needs one or both of:<u></u><u></u></p>
</div>
<div>
<ul type="disc">
<li class="MsoNormal">
an SPF record setting up for the "<a href="http://zend.to" target="_blank">zend.to</a>"
domain that authorises the mail servers transmitting the
list's messages to do so, and/or<u></u><u></u></li>
<li class="MsoNormal">
DKIM signatures being added to the messages, ideally
with "d=<a href="http://zend.to" target="_blank">zend.to</a>"
as the attribute in the signature.<u></u><u></u></li>
</ul>
<div>
<p class="MsoNormal">Adding either or both of these should
eliminate the warnings.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Mike B-)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:#666666">Systems
Administrator & Change Manager</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#666666">IT
Services, University of York, Heslington, York
YO10 5DD, UK</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#666666">Tel:
<a href="tel:%2B44-%280%291904-323811" value="+441904323811" target="_blank">+44-(0)1904-323811</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#666666">Web:
<a href="http://www.york.ac.uk/it-services" target="_blank">
www.york.ac.uk/it-services</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#666666">Disclaimer:
<a href="http://www.york.ac.uk/docs/disclaimer/email.htm" target="_blank">
www.york.ac.uk/docs/<wbr>disclaimer/email.htm</a></span><u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="m_2849635567719331640mimeAttachmentHeader"></fieldset>
<br>
</div></div><pre>______________________________<wbr>_________________
ZendTo mailing list
<a class="m_2849635567719331640moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to" target="_blank">ZendTo@zend.to</a>
<a class="m_2849635567719331640moz-txt-link-freetext" href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto" target="_blank">http://mailman.ecs.soton.ac.<wbr>uk/mailman/listinfo/zendto</a></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre class="m_2849635567719331640moz-signature" cols="72">Jules
--
Julian Field MEng MBCS CITP CEng
<a class="m_2849635567719331640moz-txt-link-abbreviated" href="http://www.Zend.To" target="_blank">www.Zend.To</a>
Twitter: @JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
ZendTo mailing list<br>
<a href="mailto:ZendTo@zend.to">ZendTo@zend.to</a><br>
<a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto" rel="noreferrer" target="_blank">http://mailman.ecs.soton.ac.<wbr>uk/mailman/listinfo/zendto</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><font color="#666666">Systems Administrator & Change Manager</font></div><div><font color="#666666">IT Services, University of York, Heslington, York YO10 5DD, UK</font></div><div><font color="#666666">Tel: +44-(0)1904-323811</font></div><div><font color="#666666"><br></font></div><div><font color="#666666">Web:<span style="white-space:pre"> </span><a href="http://www.york.ac.uk/it-services" target="_blank">www.york.ac.uk/it-services</a></font></div><div><font color="#666666">Disclaimer:<span style="white-space:pre"> </span><a href="http://www.york.ac.uk/docs/disclaimer/email.htm" target="_blank">www.york.ac.uk/docs/disclaimer/email.htm</a></font></div></div></div>
</div>