Linode Forum
https://forum.linode.com/

SPF Records/Google Apps
https://forum.linode.com/viewtopic.php?f=11&t=5322		 Page 1 of 1
Author:  devon [ Wed Mar 17, 2010 3:40 pm ]
Post subject:  SPF Records/Google Apps
I've looked at a bazillion references to setting up SPF records and still can't seem to get them correct. For my domain siskinsoftware.com I have a TXT record:
v=spf1 mx include:_spf.google.com -all

When I do a test email to spf-test@openspf.org I get:
Quote:
The error that the other server returned was: 550 550 5.7.1 <spf-test@openspf.org>: Recipient address rejected: SPF Tests: Mail-From Result="pass": Mail From="david@siskinsoftware.com" HELO name="mail-pv0-f173.google.com" HELO Result="none" Remote IP="74.125.83.173" (state 14).

I have a catchall on google apps to david.
The HELO test seems to be failing. This is happening in real-world situation since I can not send mail to particular email addresses with following error:
The error that the other server returned was:
Quote:
550 550-Verification failed for <david@siskinsoftware.com>
550-No Such User Here
550 Sender verify failed (state 14).


I am able to send to that address from non-google apps account. I am also able to send from the google apps account to other emails at different hosts (most likely because of less strict SPF checks or google.com exception).

What do I need to change to get that HELO test to pass which I assume is what is preventing my email from being accepted at certain mail servers.

Thank you.
Author:  Stever [ Wed Mar 17, 2010 7:35 pm ]
Post subject:  Re: SPF Records/Google Apps
Quote:
The error that the other server returned was: 550 550 5.7.1 <spf-test@openspf.org>: Recipient address rejected: SPF Tests: Mail-From Result="pass": Mail From="david@siskinsoftware.com" HELO name="mail-pv0-f173.google.com" HELO Result="none" Remote IP="74.125.83.173" (state 14).

I don't think your problem is SPF related. Result="none" should be as good as a pass, and many many senders (apparently including google) don't implement SPF records on their HELO.
Author:  devon [ Thu Mar 18, 2010 8:35 am ]
Post subject: 
You are correct it was not an SPF issue. It turns out the problem was that the domain name server for the domain I was attempting to send email to never updated the DNS records for the domain I was emailing from even though the DNS changes had been done 7 days ago. :roll: So it did not have the correct MX records for the domain I was sending from and appears to be why that mail server was returning 550 errors.

I had tested using the domain at that server before switching to linode so it somehow kept its own private copy of DNS entry for that domain, which pointed a MX record to that server, hence the user not found response. So doing a DIG on that domain showed the correct information UNLESS you looked up my domain on the DNS for the domain that I was attempting to send mail to.
Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/