So i get this error when a user tries to send an email to another domain (they must have SPF at a high level) This server requires you to send from an IP address specified by the SPF for mydomain.com v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com -all or should it be v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com +all record seems to look fine to me why would users still get this message ?

On Wed, 19 Sep 2012 14:20:40 +0000, Matthew Lebrasseur wrote: >So i get this error when a user tries to send an email to another domain (they must have SPF at a high level) > >This server requires you to send from an IP address specified by the SPF for mydomain.com A lot depends on whether they're using SPF or SenderID. SPF is just going to check the envelope commands (MAIL FROM and HELO/EHLO). Do you publish SPF record(s) for your server's FQDN? >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com -all > >or should it be > >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com +all I quote from http://www.openspf.org/SPF_Record_Syntax -- "The domain owner thinks that SPF is useless and/or doesn't care". :-) >record seems to look fine to me why would users still get this message ? You can visit this URL: http://www.openspf.org/Tools There are a couple of tools there (one e-mail based). The one I like to use is http://www.kitterman.com/spf/validate.html. If you only allow one IP address to send mail for your organization your record is overly complicated -- you can shorten it to: v=spf1 ip4:1.1.1.1 -all --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Wed, 19 Sep 2012 14:20:40 +0000, Matthew Lebrasseur wrote: >So i get this error when a user tries to send an email to another domain (they must have SPF at a high level) > >This server requires you to send from an IP address specified by the SPF for mydomain.com A lot depends on whether they're using SPF or SenderID. SPF is just going to check the envelope commands (MAIL FROM and HELO/EHLO). Do you publish SPF record(s) for your server's FQDN? >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com -all > >or should it be > >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com +all I quote from http://www.openspf.org/SPF_Record_Syntax -- "The domain owner thinks that SPF is useless and/or doesn't care". :-) >record seems to look fine to me why would users still get this message ? You can visit this URL: http://www.openspf.org/Tools There are a couple of tools there (one e-mail based). The one I like to use is http://www.kitterman.com/spf/validate.html. If you only allow one IP address to send mail for your organization your record is overly complicated -- you can shorten it to: v=spf1 ip4:1.1.1.1 -all --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Wed, 19 Sep 2012 14:20:40 +0000, Matthew Lebrasseur wrote: >So i get this error when a user tries to send an email to another domain (they must have SPF at a high level) > >This server requires you to send from an IP address specified by the SPF for mydomain.com A lot depends on whether they're using SPF or SenderID. SPF is just going to check the envelope commands (MAIL FROM and HELO/EHLO). Do you publish SPF record(s) for your server's FQDN? >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com -all > >or should it be > >v=spf1 mx ptr a:xmail.mydomain.com mx:mydomain.com +all I quote from http://www.openspf.org/SPF_Record_Syntax -- "The domain owner thinks that SPF is useless and/or doesn't care". :-) >record seems to look fine to me why would users still get this message ? You can visit this URL: http://www.openspf.org/Tools There are a couple of tools there (one e-mail based). The one I like to use is http://www.kitterman.com/spf/validate.html. If you only allow one IP address to send mail for your organization your record is overly complicated -- you can shorten it to: v=spf1 ip4:1.1.1.1 -all --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP