Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I can't get a pass on the emails coming from my application servers :( - I have 2

I am using http://tools.bevhost.com/spf/ to validate my newly minted SPF records. It has the following to say:

pass

spfquery: domain of xxx.com designates xxx.xxx.xxx.xxx as permitted sender
Received-SPF: pass (spfquery: domain of xxx.com designates xxx.xxx.xxx.xxx as permitted sender) client-ip=xxx.xxx.xxx.xxx; envelope-from=clientservices@xxx.com; helo=prod02.xxx.com;

The header of the emails I am receiving from the site say the following

Received-Spf: neutral (google.com: xxx.xxx.xxx.xxx is neither permitted nor denied by best guess record for domain of apache@prod02.xxx.com) client-ip=xxx.xxx.xxx.xxx;
Authentication-Results: mx.google.com; spf=neutral (google.com: xxx.xxx.xxx.xxx is neither permitted nor denied by best guess record for domain of apache@prod02.xxx.com) smtp.mail=apache@prod02.xxx.com

xxx.xxx.xxx.xxx is the same IP every time xxx.com is the same domain every time - sorry for the obfuscation, I'm not sure how much information it's safe to give out. halp?

share|improve this question
    
Obfuscate, yes, but please don't use porn domains in your obfuscation. There are RFCs laying out appropriate example domain names and example IP addresses. Use them. –  TRiG Dec 11 '13 at 12:50

1 Answer 1

up vote 5 down vote accepted

Your email is being sent from "apache2@prod.xxx.com", and the domain prod.xxx.com is not the one for which you set up an SPF record.

You can do one of two things:

  1. Change the server's mailer so that its outgoing mail uses a domain you expect.
  2. Set up an SPF record for prod.xxx.com.
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.