SPF DNS Error / R_SPF_DNSFAIL

[Carlos Mogas da Silva]

On Mon, 2022-12-19 at 12:38 +0100, Benny Pedersen wrote:
> Carlos Mogas da Silva skrev den 2022-12-19 11:57:
> > Hi list.
> > 
> > My incoming messages are getting R_SPF_DNSFAIL and an error on the
> > Authentication-Results header:
> > 
> > spf=temperror
> >  (mail01.r3pek.org: error in processing during lookup of
> >  no-reply at cttexpresso.pt: DNS error)
> 
> for cttexpresso.pt netblocks are authorized 492,110 individual IPv4 
> addresses so many ips why not just +all in there spf ?
> 

That was just an example of a failing request. They all fail.

> for r3pek.org change spf to "v=spf1 ip4:195.201.255.103 
> ip6:2a01:4f8:c2c:4d63::3 -all" this will disable needs for dns resolve 
> of ips, it might help while keeping it valid spf

That's doable, but I don't think the problem is really *my* spf record.

> > I see the DNS request on my DNS server and a "working" reply going
> > out. What can cause this error
> > and/or how can I debug it?
> 
> try avoid to many dns querys

Even on a caching dns server? Any ideas on why it is failing?