[Mailman-Users] SPF MAIL FROM check failed: [MAIL_FROM]

Thu May 10 07:32:07 CEST 2012

David wrote:
>
>I started by setting up an SPF record (#2 on the list above). However,
>shortly after setting it up, we got a bounce with this reason:
>
>SPF MAIL FROM check failed:  [MAIL_FROM]
[...]
>
>Looking at the headers of the bounced message, I note:
>
>Received-SPF: pass (domain of lists.example.com designates 10.10.10.99 as
>permitted sender)
>X-Originating-IP: [10.10.10.99]

That line says that Yahoo checked your SPF when it received the mail
from you and your lists.example.com SPF designated your IP as a
permitted sender so it was OK.

However, the message was then relayed by Yahoo to the recipient's MX
and the recipient's MX checked the domain of the envelope sender
(still lists.example.com) and it's SPF did not designate
nm1.bullet.mail.sp2.yahoo.com which is the serve from which it
received the mail as a permitted or at least neutral sender, so the
recipients MX refused the mail.

Your choices are:

1) don't publish SPF
2) don't relay via Yahoo
3) designate ?all in your domain's SPF

(maybe others, I'm not an SPF expert)

[...]
>Also, I note:
>
>X-YahooFilteredBulk: 10.10.10.99 <-- what does "X-YahooFilteredBulk" mean?

Ask Yahoo. It's their non-standard (private) header.

>And there is another value for this field.
>X-Originating-IP: [76.21.140.158]

It appears that the mail originated at your "homecomputer3" via a
comcast ip and was relayed via worldnet.att.net which noted that it
originated from the comcast IP 76.21.140.158.

Subsequently, it was delivered to list at lists.example.com at some server
variously reported as 'localhost', 127.0.0.1 (Generally the IP of
'localhost'), myhost.hostingprovider.com (aka the local network IP
10.10.10.99), and mta1017.biz.mail.mud.yahoo.com all of which appear
to be tthe same actual machine, and subsequently it was relayed via
another Yahoo server which checked the SPF for lists,example.com and
found it designated 10.10.10.99 as a premitted sender.

>These are the headers of the bounced message:
>
>Subject: Failure Notice
>Sorry, we were unable to deliver your message to the following address.
>
><recipient at destination.com.br>:
>Remote host said: 550 5.7.1 SPF MAIL FROM check failed:  [MAIL_FROM]
>
>--- Below this line is a copy of the message.
>
>Received: from [72.30.22.79] by nm1.bullet.mail.sp2.yahoo.com with NNFMP;
>09 May 2012 21:51:02 -0000
>Received: from [68.142.200.224] by tm13.bullet.mail.sp2.yahoo.com with
>NNFMP; 09 May 2012 21:51:02 -0000
>Received: from [66.94.237.102] by t5.bullet.mud.yahoo.com with NNFMP; 09
>May 2012 21:51:01 -0000
>Received: from [127.0.0.1] by omp1007.access.mail.mud.yahoo.com with NNFMP;
>09 May 2012 21:51:01 -0000
>X-Yahoo-Newman-Property: ymail-3
>X-Yahoo-Newman-Id: 502900.95307.bm at omp1007.access.mail.mud.yahoo.com
>X-Yahoo-Forwarded: from recipient at destination.com to
>recipient at destination.com.br
>Return-Path: <all-bounces at lists.example.com>
>X-YahooFilteredBulk: 10.10.10.99
>Received-SPF: pass (domain of lists.example.com designates 10.10.10.99 as
>permitted sender)
>X-YMailISG: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>X-Originating-IP: [10.10.10.99]
>Authentication-Results: mta1017.biz.mail.mud.yahoo.com  from=3D
>lists.example.com; domainkeys=3Dneutral (no sig);  from=3Datt.net;
>dkim=3Dpermerror (bad sig)
>Received: from 127.0.0.1  (EHLO localhost) (10.10.10.99)
> by mta1017.biz.mail.mud.yahoo.com with SMTP; Wed, 09 May 2012 14:51:01
>-0700
>Received: from myhost.hostingprovider.com (localhost [127.0.0.1])
>       by localhost (Postfix) with ESMTP id E9CA1123AB;
>       Wed,  9 May 2012 21:43:23 +0000 (UTC)
>X-Original-To: list at lists.example.com
>Delivered-To: list at lists.example.com
>Received: from fmailhost01.isp.att.net (fmailhost01.isp.att.net
> [204.127.217.101]) by localhost (Postfix) with ESMTP id 1D84D123A4
> for <list at lists.example.com>; Wed,  9 May 2012 20:52:06 +0000 (UTC)
>DKIM-Signature: v=3D1; q=3Ddns/txt; d=3Datt.net; s=3Ddkim01; i=3Dmember1 at do=
>main.net;
> a=3Drsa-sha256; c=3Drelaxed/relaxed; t=3D1336596725; h=3DContent-Type:
> MIME-Version:Message-ID:Date:Subject:In-Reply-To:References:To:
> From; yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
>Received: from homecomputer3
> (c-76-21-140-158.hsd1.va.comcast.net[76.21.140.158])
> by worldnet.att.net (frfwmhc01) with SMTP
> id <20120509205204H0100sdv2pe>; Wed, 9 May 2012 20:52:05 +0000
>X-Originating-IP: [76.21.140.158]
>From: "Member One" <member1 at domain.net>
>To: "'Example Discussion'" <list at lists.example.com>
>References: <
>13283191.1336591910177.JavaMail.root at wamui-june.atl.sa.earthlink.net>
>In-Reply-To: <
>13283191.1336591910177.JavaMail.root at wamui-june.atl.sa.earthlink.net>
>Date: Wed, 9 May 2012 16:52:07 -0400
>Message-ID: <!&!aaaaaaaaaaaaaaaaaaaaaaaaaaaaa=3D=3D at att.net>
>MIME-Version: 1.0
>X-Mailer: Microsoft Office Outlook 12.0
>Thread-Index: xyxyzyzy
>Content-Language: en-us
>X-Mailman-Approved-At: Wed, 09 May 2012 21:43:22 +0000
>Subject: [Example Discussion 110] Re: Example Subject
>X-BeenThere: list at lists.example.com
>X-Mailman-Version: 2.1.14
>Precedence: list
>Reply-To: Example Discussion <list at lists.example.com>
>List-Id: Example Discussion <all.lists.example.com>
>List-Unsubscribe: <http://lists.example.com/m/options/all>,
> <mailto:all-request at lists.example.com?subject=3Dunsubscribe>
>List-Archive: <http://lists.example.com/archive/all>
>List-Post: <mailto:list at lists.example.com>
>List-Help: <mailto:all-request at lists.example.com?subject=3Dhelp>
>List-Subscribe: <http://lists.example.com/m/listinfo/all>,
> <mailto:all-request at lists.example.com?subject=3Dsubscribe>
>Content-Type: multipart/mixed;
>boundary=3D"=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D425472280456034579=
>5=3D=3D"
>Errors-To: all-bounces at lists.example.com
>Sender: all-bounces at lists.example.com

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan