SPF not working? how to test

[sehh]

Today I received a spam mail which only had the following SA rules hit:

4.5 BAYES_80 BODY: Bayes spam probability is 80 to 95% [score: 0.9442]
0.3 FROM_12LTRDOM From a 12-letter domain

What is interesting, is that the spammer used my own email address in both the From: and the To: fields, but the SPF check did not work as expected. Since the email originates from a Russian IP address and it is not in my SPF line, I expected it to get blocked right away.

So what happened? SPF checking is enabled in the Exim configuration!

If my SPF checking is working, why didn't it block this email, and if it is not working then there must be a bug somewhere...

Any ideas how to test SPF by myself?

 

[cPanelTristan]

What is the SPF entry you have for the domain in question?

 

[sehh]

here it is:

"v=spf1 ip4:X.X.X.X a mx -all"

The domain has its own private IP address and the ip4: field has the IP address of the VPS, in case emails are going out via that route as well.