Jump to content

Mail Security: SPF Fail even if Domain in Whitelist


Recommended Posts

I've included domain.com in our Whitelist (Antispam protection/Approved Senders list/domain.com) but I still get:

2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,0,192.168.0.106:25,41.226.16.66:58260,+,,
2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,1,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,2,192.168.0.106:25,41.226.16.66:58260,>,220 posta.mydomain.com,
2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,3,192.168.0.106:25,41.226.16.66:58260,<,HELO host,
2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,4,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,5,192.168.0.106:25,41.226.16.66:58260,>,250 SRV-A006.mydomain.com Hello [IP],
2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,6,192.168.0.106:25,41.226.16.66:58260,<,MAIL FROM:<user@domain.com>,
2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,7,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,8,192.168.0.106:25,41.226.16.66:58260,*,08D864A25D394BA1;2020-10-13T12:07:33.713Z;1,receiving message
2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,9,192.168.0.106:25,41.226.16.66:58260,>,250 2.1.0 Sender OK,
2020-10-13T12:07:33.931Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,10,192.168.0.106:25,41.226.16.66:58260,<,RCPT TO:<user1@mydomain.com>,
2020-10-13T12:07:33.931Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,11,192.168.0.106:25,41.226.16.66:58260,>,250 2.1.5 Recipient OK,
2020-10-13T12:07:33.994Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,12,192.168.0.106:25,41.226.16.66:58260,<,DATA,
2020-10-13T12:07:33.994Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,13,192.168.0.106:25,41.226.16.66:58260,>,354 Start mail input; end with <CRLF>.<CRLF>,
2020-10-13T12:07:34.088Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,14,192.168.0.106:25,41.226.16.66:58260,*,,Ignored X-OriginatorOrg header value 'domain.com' because session capabilities do not allow it
2020-10-13T12:07:34.103Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,15,192.168.0.106:25,41.226.16.66:58260,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
2020-10-13T12:07:35.541Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,16,192.168.0.106:25,41.226.16.66:58260,*,Tarpit for '0.00:00:05' due to '550 5.7.1 SPF check failed',
2020-10-13T12:07:40.556Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,17,192.168.0.106:25,41.226.16.66:58260,>,550 5.7.1 SPF check failed,
2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,18,192.168.0.106:25,41.226.16.66:58260,<,QUIT,
2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,19,192.168.0.106:25,41.226.16.66:58260,>,221 2.0.0 Service closing transmission channel,
2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,20,192.168.0.106:25,41.226.16.66:58260,-,,Local

What am I missing?

Link to comment
Share on other sites

  • ESET Staff

You need to use one of the IP & Domain-to-IP whitelists, for example

Greylisting and SPF -> IP whitelist

Greylisting and SPF -> Domain to IP whitelist

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...