Help with SPF

[squaredd]

Hello,

I need some help

Some mails received from xxx.org domain on our mail server are being discarded by the SPF.
The reason received by the sender is:

550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org

That IP address is from google mail.

The SPF record of xxx.org is set to:

"v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"

For what I understand from the SPF record syntax, “redirect=_spf2.otherdomain.net” causes to ignore the other two “includes:” So only the SPF from “=_spf2.otherdomain.net” is being used.

Is this correct?

Do you think that changing their SPF to

"v=spf1 include:email.domain.co.uk include:_spf2.otherdomain.net include:_spf.google.com ~all"

should fix the problem?

 

[squaredd]

Anyone can point us in the right direction. We've contacted the remote domain with the previous info but didn't believe us. They say it is our fault.

TY

 

[markusa]

Hello,

I need some help

Some mails received from xxx.org domain on our mail server are being discarded by the SPF.
The reason received by the sender is:

550-SPF: 74.125.82.181 is not allowed to send mail from xxx.org

That IP address is from google mail.

The SPF record of xxx.org is set to:

"v=spf1 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"

I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings.
You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16

"v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"

 

[squaredd]

I can't tell what the redirect is causing, but in order to include the mentioned IP, you need something like ip4:74.125.82.181 as it appears, that this IP is not included in their _spf.google.com settings.
You can also include all IP's from google using CIDR format like ip4:74.125.0.0/16

"v=spf1 ip4:74.125.0.0/16 include:email.domain.co.uk redirect=_spf2.otherdomain.net include:_spf.google.com ~all"

Thank you Markusa. I've done a look up of the google SPF and it includes the 74.125.0.0/16 block.

So I suspect that the "redirect" modifier is causing this behaviour.

Can anyone confirm this?

TY

 

[cPanelMichael]

Hello

Out of curiosity, is there any particular reason you are using this custom SPF record instead of the default record implemented through cPanel? Is there a particular need you must accommodate, or is using the standard SPF record implemented through cPanel an option?

Thank you.