SPF record query

-

i have 2 domains

a.com , b.com both publically exposed 

a.com have spf record

b.com doesn't have spf record

email transactions a.com fine.

however b.com sometime get #550 sender authorization check failed.

i gone through microsoft guidance in given link 

http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=5546

it says

1. sender or user sends an e-mail message an e-mail client or web interface. no interaction or
changes sender's client or mail transfer agent (mta) required.
2. recipient's inbound e-mail server receives the e-mail message. the server uses sidf , calls
purported responsible domain's (prd) dns spf record.
3. receiving mta determines whether outbound e-mail server's ip address matches ip addresses authorized send e-mail domain.
4. domains , ips, sender reputation data applied sidf verdict check.
5. based on spf record syntax, pass or fail verdict, reputation data, , content filtering score, receiving mta delivers e-mail message inbox, junk or bulk folder, or quarantine folder. if e-mail message fails, receiving network may block, delete, or junk message.

if true why getting ndr above error recipient domain should block, delete, or junk message.

the mail server check spf automatically why not getting ndr every domain b.com sent email every mta checks same rfc 2822 

not every admin @ every company may have configured mail server on internet check spf, , companies use different methods check spam, results vary.

so depends on how receiving mail server (the receiving mta) handles and/or software using (either exchange, or third party smtp gateway - barracuda, postini, messagelabs, etc etc), to check spf , other spam rejection methods, and whether ndr provided or not. of smaller customers, set scl 9 , above deleted. scl 7 -8 put in junk folder.

by rights, configure spf eliminate possibility company's emails rejected solely on spf tests, companies have set reject.

ace fekay
mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003
microsoft certified trainer
microsoft mvp - directory services
technical blogs & videos: http://www.delawarecountycomputerconsulting.com/

this post provided as-is no warranties or guarantees , confers no rights.

facebook twitter linkedin



Windows Server  >  Network Infrastructure Servers



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more