SPF Records and Round Robin DNS

Junior Member
Posts: 37
Joined: Sat Mar 15, 2008 12:13 pm

SPF Records and Round Robin DNS

Postby ccsliinc » Fri Sep 30, 2016 6:20 pm

I am testing SPF records on remote domains. Please see the incoming failure below. But FedEx states their records are correct because the first record in the seperated line which is a:smtp.dmz.fedex.com, is a round robin dns entry which has the 199.81.212.186 ip associated with it. So when your testing SPF are you testing all records in a round robin?

Code: Select all
2016-09-27 03:55:10               656         0              ------ Requested connection from 199.81.212.186, Country: United States, SID:1609270355100200
2016-09-27 03:55:10               656         0              +Filter: "Block specific countries"
2016-09-27 03:55:10               656         0              +Filter: "DNSWL"
2016-09-27 03:55:10               656         0              Checking DNSBL [186.212.81.199.list.dnswl.org]
2016-09-27 03:55:10               656         78           Checking DNSBL [186.212.81.199.swl.spamhaus.org]
2016-09-27 03:55:10               656         141         +Filter: "Message Sniffer"
2016-09-27 03:55:10               656         188         GBUdb result: 0
2016-09-27 03:55:10               656         188         +Filter: "DNSBL"
2016-09-27 03:55:10               656         188         Checking DNSBL [186.212.81.199.cbl.abuseat.org]
2016-09-27 03:55:10               656         282         Checking DNSBL [186.212.81.199.bl.spamcop.net]
2016-09-27 03:55:10               656         360         Checking DNSBL [186.212.81.199.sbl-xbl.spamhaus.org]
2016-09-27 03:55:10               656         516         Connected to secure.bsemarketing.com:25
2016-09-27 03:55:10               656         578         <-- 220 secure.bsemarketing.com Microsoft ESMTP MAIL Service ready at Tue, 27 Sep 2016 03:55:12 -0400
2016-09-27 03:55:10               656         625         --> EHLO mx30.infosec.fedex.com
2016-09-27 03:55:10               656         688         <-- 250-secure.bsemarketing.com Hello [70.35.204.155]
2016-09-27 03:55:10               656         688         <-- 250-SIZE 24821760
2016-09-27 03:55:10               656         688         <-- 250-ENHANCEDSTATUSCODES
2016-09-27 03:55:10               656         688         <-- 250-AUTH
2016-09-27 03:55:10               656         688         <-- 250-8BITMIME
2016-09-27 03:55:10               656         688         <-- 250 OK
2016-09-27 03:55:10               656         719         --> MAIL FROM:<prvs=7078bce339=Ebill-user@freight.fedex.com> SIZE=229938
2016-09-27 03:55:10               656         782         +Filter: "SPF Test"
2016-09-27 03:55:11               656         1188       SPF result: FAIL
2016-09-27 03:55:11               656         1188       freight.fedex.com: v=spf1 redirect=_spf.infosec.fedex.com

2016-09-27 03:55:11               656         1188       _spf.infosec.fedex.com: v=spf1 a:smtp.dmz.fedex.com include:_spf.salesforce.com include:spf.mandrillapp.com ip4:216.136.162.64/

2016-09-27 03:55:11               656         1188       _spf.salesforce.com: v=spf1 include:_mtablock1.salesforce.com ip4:136.146.208.16/28 ip4:136.146.210.16/28 ip4:136.147.62.192/26
2016-09-27 03:55:11               656         1188       _mtablock1.salesforce.com: v=spf1 ip4:96.43.144.64/28 ip4:96.43.147.64/28 ip4:96.43.148.64/28 ip4:96.43.151.64/28 ip4:96.43.152
2016-09-27 03:55:11               656         1188       spf.mandrillapp.com: v=spf1 ip4:198.2.128.0/24 ip4:198.2.132.0/22 ip4:198.2.136.0/23 ip4:198.2.186.0/23 ip4:205.201.131.128/25
2016-09-27 03:55:11               656         1188       Stop all filters
2016-09-27 03:55:11               656         1188       <-- 554 Rejecting due to security policy (SPF:1609270355100200)
2016-09-27 03:55:11               656         1235       Disconnect

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Re: SPF Records and Round Robin DNS

Postby Alexander Telegin » Mon Oct 10, 2016 2:48 am

Hm... it successfully passed test here. Maybe it was a temporary network problem?

Junior Member
Posts: 37
Joined: Sat Mar 15, 2008 12:13 pm

Re: SPF Records and Round Robin DNS

Postby ccsliinc » Thu Oct 13, 2016 2:00 pm

This has been an ongoing problem for months now. I can explain more if you like or can work with you to explain.

Junior Member
Posts: 37
Joined: Sat Mar 15, 2008 12:13 pm

Re: SPF Records and Round Robin DNS

Postby ccsliinc » Thu Oct 20, 2016 11:42 pm

Anything on this?

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Re: SPF Records and Round Robin DNS

Postby Alexander Telegin » Fri Oct 21, 2016 8:12 pm

I still unable to reproduce it here. Try to change DNS servers for Google 8.8.8.8 or anything else.

Return to General

Who is online

Users browsing this forum: No registered users and 1 guest