squaredd

Member
Jan 21, 2014
6
0
1
cPanel Access Level
Root Administrator
Hello,

I need some help

Some mails received from xxx.org domain on our mail server are being discarded by the SPF.
The reason received by the sender is:
Code:
550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org
That IP address is from google mail.

The SPF record of xxx.org is set to:
Code:
"v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
For what I understand from the SPF record syntax, “redirect=_spf2.otherdomain.net” causes to ignore the other two “includes:” So only the SPF from “=_spf2.otherdomain.net” is being used.

Is this correct?

Do you think that changing their SPF to
Code:
"v=spf1 include:email.domain.co.uk include:_spf2.otherdomain.net include:_spf.google.com ~all"
should fix the problem?
 

squaredd

Member
Jan 21, 2014
6
0
1
cPanel Access Level
Root Administrator
Anyone can point us in the right direction. We've contacted the remote domain with the previous info but didn't believe us. They say it is our fault.

TY
 

markusa

Member
Mar 26, 2014
8
0
1
cPanel Access Level
Reseller Owner
Hello,

I need some help

Some mails received from xxx.org domain on our mail server are being discarded by the SPF.
The reason received by the sender is:
Code:
550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org
That IP address is from google mail.

The SPF record of xxx.org is set to:
Code:
"v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings.
You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16

Code:
"v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
 

squaredd

Member
Jan 21, 2014
6
0
1
cPanel Access Level
Root Administrator
I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings.
You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16

Code:
"v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"
Thank you Markusa. I've done a look up of the google SPF and it includes the 74.125.0.0/16 block.

So I suspect that the "redirect" modifier is causing this behaviour.

Can anyone confirm this?

TY
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,201
363
Hello :)

Out of curiosity, is there any particular reason you are using this custom SPF record instead of the default record implemented through cPanel? Is there a particular need you must accommodate, or is using the standard SPF record implemented through cPanel an option?

Thank you.