This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SPF check failed

Hi,

an issue with SPF checks came up yesterday. Some guys from a business partner tried to send emails to us. However they got rejected by the UTM due to "SPF check failed".

Now I don't exactly know why. Whenever I go to a SPF checking service like SPF Query Tool or SPF Policy Tester

both tell me their server is set up correctly.


SPF record lookup and validation for: [i-changed-it-to-example].com
SPF records are primarily published in DNS as TXT records.

The TXT records found for your domain are:
 v=spf1 mx a a:[someaddress].com -all 

 SPF records should also be published in DNS as type SPF records.
No type SPF records found.

 Checking to see if there is a valid SPF record. 

 Found v=spf1 record for [example].com: 
 v=spf1 mx a a:[someaddress].com -all

 evaluating...
 SPF record passed validation test with pySPF (Python SPF library)!


or



So why does the UTM think it's not valid?


This thread was automatically locked due to age.
  • Have you looked at the SMTP log file to see what IP the rejected emails were sent from?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • yes I have. I entered it in that SPF checker tool. it's the one that starts with 94.X.X.X.
  • Strange.  Do you want to PM or email me the domain name to get another pair of eyes on the problem?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Indeed, the 94. IP was not anything listed in the SPF record. In fact, that should've been obvious to us from the above pictures. 

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA