Hi list.
My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header:
spf=temperror (mail01.r3pek.org: error in processing during lookup of no-reply@cttexpresso.pt: DNS error)
I see the DNS request on my DNS server and a "working" reply going out. What can cause this error and/or how can I debug it?
Carlos Mogas da Silva skrev den 2022-12-19 11:57:
Hi list.
My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header:
spf=temperror (mail01.r3pek.org: error in processing during lookup of no-reply@cttexpresso.pt: DNS error)
for cttexpresso.pt netblocks are authorized 492,110 individual IPv4 addresses so many ips why not just +all in there spf ?
for r3pek.org change spf to "v=spf1 ip4:195.201.255.103 ip6:2a01:4f8:c2c:4d63::3 -all" this will disable needs for dns resolve of ips, it might help while keeping it valid spf
I see the DNS request on my DNS server and a "working" reply going out. What can cause this error and/or how can I debug it?
try avoid to many dns querys
On Mon, 2022-12-19 at 12:38 +0100, Benny Pedersen wrote:
Carlos Mogas da Silva skrev den 2022-12-19 11:57:
Hi list.
My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header:
spf=temperror (mail01.r3pek.org: error in processing during lookup of no-reply@cttexpresso.pt: DNS error)
for cttexpresso.pt netblocks are authorized 492,110 individual IPv4 addresses so many ips why not just +all in there spf ?
That was just an example of a failing request. They all fail.
for r3pek.org change spf to "v=spf1 ip4:195.201.255.103 ip6:2a01:4f8:c2c:4d63::3 -all" this will disable needs for dns resolve of ips, it might help while keeping it valid spf
That's doable, but I don't think the problem is really *my* spf record.
I see the DNS request on my DNS server and a "working" reply going out. What can cause this error and/or how can I debug it?
try avoid to many dns querys
Even on a caching dns server? Any ideas on why it is failing?
On Mon, 19 Dec 2022, Carlos Mogas da Silva wrote:
Hi list.
My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header:
spf=temperror (mail01.r3pek.org: error in processing during lookup of no-reply@cttexpresso.pt: DNS error)
I see the DNS request on my DNS server and a "working" reply going out. What can cause this error and/or how can I debug it?
How (which program) is the SPF check being done?
Dovecot doesn't do that (AFAIK anyway), so maybe you want to check which program (e.g. a postfix milter, such as rspamd) is doing that and check the logs of that program to see what went wrong.
But I'm 99.9% sure this has nothing to do with dovecot :)
Cheers, Bernardo
Bernardo Reino skrev den 2022-12-19 15:59:
But I'm 99.9% sure this has nothing to do with dovecot :)
unless wforced is in play :)
Don't worry: we haven't recevived it because of SPF fail ;)
Il 19/12/2022 16:12, Carlos Mogas da Silva ha scritto:
On Mon, 2022-12-19 at 15:59 +0100, Bernardo Reino wrote:
But I'm 99.9% sure this has nothing to do with dovecot :)
Looks like I won the #facepalm award :D Ment to send the email to rspamd list but sent it here... Sorry.
--
###############################
Cristiano Deana
Senior Network Engineer
Digital Response Team
CittaStudi S.p.a.
off. +39 015 855 1172
cell +39 328 310 6392
###############################
participants (4)
-
Benny Pedersen
-
Bernardo Reino
-
Carlos Mogas da Silva
-
Cristiano Deana