The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SPF not working? how to test

Discussion in 'E-mail Discussions' started by sehh, Apr 5, 2012.

  1. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    18
    Location:
    Europe
    Today I received a spam mail which only had the following SA rules hit:

    4.5 BAYES_80 BODY: Bayes spam probability is 80 to 95% [score: 0.9442]
    0.3 FROM_12LTRDOM From a 12-letter domain

    What is interesting, is that the spammer used my own email address in both the From: and the To: fields, but the SPF check did not work as expected. Since the email originates from a Russian IP address and it is not in my SPF line, I expected it to get blocked right away.

    So what happened? SPF checking is enabled in the Exim configuration!

    If my SPF checking is working, why didn't it block this email, and if it is not working then there must be a bug somewhere...

    Any ideas how to test SPF by myself?
     
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    What is the SPF entry you have for the domain in question?
     
  3. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    18
    Location:
    Europe
    here it is:

    Code:
    "v=spf1 ip4:X.X.X.X a mx -all"
    
    The domain has its own private IP address and the ip4: field has the IP address of the VPS, in case emails are going out via that route as well.
     
Loading...

Share This Page