Sunday, November 24, 2013

SPF Record Failure Issue

                                                 SPF Record Issue

Hi Friends,
In this article I am going to introduce you with a common issue of Email organization which called "SPF record not found"

If you're not able to send the emails due to SPF record are not found or not valid.

What is SPF??????

Sender Policy Framework (SPF) is an email validation system designed to prevent email spam by detecting email spoofing, a common vulnerability, by verifying sender IP addresses. SPF allows administrators to specify which hosts are allowed to send mail from a given domain by creating a specific SPF record (or TXT record) in the Domain Name System (DNS). Mail exchangers use the DNS to check that mail from a given domain is being sent by a host sanctioned by that domain's administrators

 Firstly we have to check the emails logs and on the behalf of that logs, we analyze that email is rejecting due to SPF record failure.
Here I am attaching a screenshot of SFP record failure issue.


                                                Image-1.1

For more details click on log and you will see the following results.

6:59:23.000 PM   
Oct 24 18:59:23 mx-01.test.com sm-mta[1165]: r9OFxLhb001165: from=<Reggie.Waterman@rci.rogers.com>, size=7728, class=0, nrcpts=1, msgid=<da19bbed761a4c248265eb39728e10b1@CO1PR04MB426.namprd04.prod.outlook.com>, proto=ESMTP, daemon=MTA, tls_verify=FAIL, auth=NONE, relay=mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208]
Oct 24 18:59:23 mx-01.test.comdkim-filter[5874]: r9OFxLhb001165: no signature data
Oct 24 18:59:23 mx-01.test.comsm-mta[1165]: r9OFxLhb001165: Milter insert (1): header: X-DKIM:  OpenDKIM Filter v2.1.3 mx-01.test.comr9OFxLhb001165
Oct 24 18:59:23 mx-01.test.comMM: [Jilter Processor 17 - Async Jilter Worker 13 - 127.0.0.1:42288-r9OFxLhb001165] INFO  user.log  - mtaqid=r9OFxLhb001165, engine=cloudmark, from=<Reggie.Waterman@rci.rogers.com>, recipients=<chad.saliba@test.com>, relay=mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208], spam_score=0.00, size=7947, spam_class=ham
Oct 24 18:59:24 mx-01.test.comMM: [Jilter Processor 17 - Async Jilter Worker 13 - 127.0.0.1:42288-r9OFxLhb001165] INFO  user.log  - SPF.Check: classification=SPF-Failure
Oct 24 18:59:24 mx-01.test.comMM: [Jilter Processor 17 - Async Jilter Worker 13 - 127.0.0.1:42288-r9OFxLhb001165] INFO  user.log  - mtaqid=r9OFxLhb001165, pra=Reggie.Waterman@rci.rogers.com, relay=mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208], sid-status=FAIL
Oct 24 18:59:24 mx-01.test.comMM: [Jilter Processor 17 - Async Jilter Worker 13 - 127.0.0.1:42288-r9OFxLhb001165] INFO  user.log  - mtaqid=r9OFxLhb001165, msgid=<da19bbed761a4c248265eb39728e10b1@CO1PR04MB426.namprd04.prod.outlook.com>, from=<Reggie.Waterman@rci.rogers.com>, size=7947, to=<chad.saliba@test.com>, relay=mail-bl2lp0208.outbound.protection.outlook.com [207.46.163.208], categorization=clean, disposition=permanently-rejected
Oct 24 18:59:24 mx-01.test.comsm-mta[1165]: r9OFxLhb001165: Milter: data, reject=551 SPF failed
Oct 24 18:59:24 mx-01.test.comsm-mta[1165]: r9OFxLhb001165: to=<chad.saliba@test.com>, delay=00:00:01, pri=37728, stat=SPF failed


Note: Under the red bold color, you can see the SPF failure issue.

Visit on the following sites to check the status of SPF Failure or understand more about the  SPF record.

                Or

To resolve this issue, you should inform to IT-Team to register or verify the IP address of their Sending (Outgoing) server in public DNS SPF record.

                  **************************************************************

                                                                               
                                        Regards,
                                     Arun Chaudhary
                              MCP, MCTS, MCITP, VCA, ITIL


                                

No comments: