Log SPF activity poor

rcarrillo
Posts: 12
Joined: Mon Jun 17, 2013 12:01 pm

Log SPF activity poor

Postby rcarrillo » Wed Apr 13, 2016 10:35 am

Hi

It can be configured so that the SPF check is more detailed in the log, now stored in the log only when this check fails, and saves: "his server requires you to send from an IP address specified by the SPF for domain.com" and debug file: "Sender domain domain.com denied due to SPF failure" need to save more detailed information check SPF. it's possible?

Thanks

MailEnable-Ian
Site Admin
Posts: 8512
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Log SPF activity poor

Postby MailEnable-Ian » Thu Apr 14, 2016 3:54 am

Hi,

What type of detailed information do you require to be logged?
Regards,

Ian Margarone
MailEnable Support

rcarrillo
Posts: 12
Joined: Mon Jun 17, 2013 12:01 pm

Re: Log SPF activity poor

Postby rcarrillo » Thu Sep 21, 2017 5:39 pm

Hi again,

A detailed activity log of the SPF query that does when receiving an email.

What happens to me is that I get mail that should be rejected by SPF, can it be that the SPF query is not doing well? Or that certain emails do not pass through SPF?

Thanks in advance.

MailEnable-Ian
Site Admin
Posts: 8512
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Log SPF activity poor

Postby MailEnable-Ian » Mon Sep 25, 2017 1:38 am

Hi,

Try and configure SMTP to higher level debug logging to see if this provides the information your looking for. Here is an article that explains how to enable this:

http://www.mailenable.com/kb/content/article.asp?ID=ME020585
Regards,

Ian Margarone
MailEnable Support

rcarrillo
Posts: 12
Joined: Mon Jun 17, 2013 12:01 pm

Re: Log SPF activity poor

Postby rcarrillo » Mon Sep 25, 2017 11:16 am

Hi,

thanks you for your response.

I've a problem with SPF, this is the following:

I have an incoming email which is 912453537@qq.com from the IP address 59.62.119.47 which is not authorized for sending by SPF policy of the qq.com domain. Mailenable does not reject such mail, even though it is set to reject it. Attached log:

09/24/17 00:07:56 ME-E0113: [1040] Message marked as spam: (59.62.119.47) was found in DNS blacklisted database Barracuda Reputation Block List.
09/24/17 00:07:56 ME-IXXXX: [1040] Resolve3: NDR/bulk setting 0
09/24/17 00:07:56 ME-IXXXX: [1040] Resolve: NDR/bulk setting 0,
09/24/17 00:07:56 ME-IXXXX: [1040] Performing SPF lookup on sender [SMTP:912453537@qq.com]
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486096, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 include:spf.mail.qq.com -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) SPF record returned is: (v=spf1 include:spf.mail.qq.com -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42348416, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) SPF record returned is: (v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-a.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486576, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) SPF record returned is: (v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-b.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42342624, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24 ip4:58.250.132.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) SPF record returned is: (v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24 ip4:58.250.132.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-c.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42485472, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) SPF record returned is: (v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-d.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42342656, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24 ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) SPF record returned is: (v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24 ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-e.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486576, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24 ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:49.51.132.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) SPF record returned is: (v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24 ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:49.51.132.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) Valid SPF version detected


What can be happening?

Thanks in advance

MailEnable-Ian
Site Admin
Posts: 8512
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Log SPF activity poor

Postby MailEnable-Ian » Wed Sep 27, 2017 1:30 am

Hi,

Can you post up the SMTP activity log snippet of the SMTP transaction for the inbound message from 912453537@qq.com.
Regards,

Ian Margarone
MailEnable Support

rcarrillo
Posts: 12
Joined: Mon Jun 17, 2013 12:01 pm

Re: Log SPF activity poor

Postby rcarrillo » Wed Sep 27, 2017 5:55 pm

here you go:

09/24/17 00:07:50 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 220 mail.xxxxxxxxxx.net ESMTP MailEnable Service, Version: 9.76--9.76 ready at 09/24/17 00:07:50 0 0
09/24/17 00:07:51 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 HELO HELO qq.com 250 Requested mail action okay, completed 43 13
09/24/17 00:07:52 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 MAIL MAIL FROM: <912453537@qq.com> 250 Requested mail action okay, completed 43 30
09/24/17 00:07:56 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 RCPT RCPT TO: <reservas@xxxxxxxxxx.net> 250 Requested mail action okay, completed 43 36
09/24/17 00:07:57 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 DATA DATA 354 Start mail input; end with <CRLF>. <CRLF> 46 6
09/24/17 00:07:59 SMTP-IN 29620FBCCEEE44C18D691457BD0446EB.MAI 1040 59.62.119.47 QUIT Quit 221 Service closing transmission channel 42 6

Is it what you wanted?

rcarrillo
Posts: 12
Joined: Mon Jun 17, 2013 12:01 pm

Re: Log SPF activity poor

Postby rcarrillo » Thu Oct 05, 2017 4:05 pm

Hi, MailEnable-Ian

Can you help me with this?

thanks you in advance

Who is online

Users browsing this forum: No registered users and 9 guests