[ZendTo] A head's up about the mailing list

[Mike Brudenell]

Hi, Jules -

There's still a problem with the SPF record for the zend.to domain I'm
afraid…

We're seeing messages arriving from IPv6 addresses, which aren't listed in
your SPF record and so are not generating SOFTFAIL results for SPF checks.

For example a message at 12:42 had this Received header

Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk.
[2001:630:d0:f102::25e])
        by mx.google.com with ESMTPS id
vg1si10581610wjb.19.2016.11.11.06.42.24
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Fri, 11 Nov 2016 06:42:24 -0800 (PST)


showing Google had received it from [2001:630:d0:f102::25e]

The MX option in your SPF record picks up the various IPv6 addresses of
your site's *inbound* mail servers, but I guess [2001:630:d0:f102::25e] is
an outbound-only server so doesn't have MX records point to it, hence
doesn't get included in the SPF data.

You need to list the IP addresses/netblocks of all your outbound servers in
the SPF record for zend.to

In passing (and the IT staff might already know) the SPF record for your
main soton.ac.uk domain is right at the maximum number of DNS lookups SPF
permits: 10. I hope no-one adds and more entries requiting lookups to it!

Cheers,
Mike B-)

On 11 November 2016 at 11:24, Jules <Jules at zend.to> wrote:

> I've just added an SPF record for the domain.
> Any thoughts on fixing the "on behalf of" issue?
>
> Thanks!
> Jules.
>
>
> On 11/11/2016 09:16, Stewart Campbell wrote:
>
> I sent an email regarding this a while ago. Domains that have
> SPF/DKIM/DMARC set up will have problems even sending mail to this list as
> it sends all list emails ‘on behalf of’ the sender. My domain does not have
> this list in its SPF record so it will fail.
>
>
>
>
>
> *From:* zendto-bounces at zend.to [mailto:zendto-bounces at zend.to
> <zendto-bounces at zend.to>] *On Behalf Of *Mike Brudenell
> *Sent:* 11 November 2016 09:08
> *To:* ZendTo Users <zendto at zend.to> <zendto at zend.to>
> *Subject:* [ZendTo] A head's up about the mailing list
>
>
>
> Just a head's up to the person/people who run the mailing list…
>
>
>
> For the past few months Google are now flagging all messages form the list
> with a a red "this message is a little suspicious" question mark indicator
> because there's no valid SPF or DKIM for it.
>
>
>
> It needs one or both of:
>
>    - an SPF record setting up for the "zend.to" domain that authorises
>    the mail servers transmitting the list's messages to do so, and/or
>    - DKIM signatures being added to the messages, ideally with "d=zend.to"
>    as the attribute in the signature.
>
> Adding either or both of these should eliminate the warnings.
>
>
>
> Cheers,
>
> Mike B-)
>
>
>
> --
>
> Systems Administrator & Change Manager
>
> IT Services, University of York, Heslington, York YO10 5DD, UK
>
> Tel: +44-(0)1904-323811
>
>
>
> Web:                www.york.ac.uk/it-services
>
> Disclaimer:      www.york.ac.uk/docs/disclaimer/email.htm
>
>
> _______________________________________________
> ZendTo mailing listZendTo at zend.tohttp://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
>
> Jules
>
> --
> Julian Field MEng MBCS CITP CEng
>
> www.Zend.To
> Twitter: @JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>



-- 
Systems Administrator & Change Manager
IT Services, University of York, Heslington, York YO10 5DD, UK
Tel: +44-(0)1904-323811

Web: www.york.ac.uk/it-services
Disclaimer: www.york.ac.uk/docs/disclaimer/email.htm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20161111/723bd3fc/attachment-0001.html