[ctw] Re: interpreting ASSP SPF fail
- From: TR Shaw <tshaw@xxxxxxxx>
- To: ctw@xxxxxxxxxxxxx
- Date: Sat, 22 Oct 2011 12:44:13 -0400
On Oct 22, 2011, at 12:31 PM, aklist wrote:
> Hi All: I'm trying to get a handle on why ASSP flagged this message as spam
> for an SPF failure?
>
> The message was sent by a local domain user using their blackberry. I have an
> SPF record for "localdomain1.com" with the IP address of the ASSP/EIMS server
> listed. The SPF record uses softfail "~all".
>
> Is the SPF fail being caused by the blackberry server, or something to do
> with the local domain?
>
> TIA for any advice!
>
> Return-Path: <user1@xxxxxxxxxxxxxxxx>
> Received: from assp.mydomain.com (127.0.0.1) by mail.mydomain.com
> with SMTP (EIMS X 3.3.9) for <monitorspam@xxxxxxxxxxxxxxxx>;
> Fri, 21 Oct 2011 09:18:31 -0700
> Received: from smtp10.bis6.us.blackberry.com ([74.82.85.10]
> helo=smtp10.bis6.us.blackberry.com)
> by assp.mydomain.com with ESMTP (ASSP 1.9); 21 Oct 2011
> 09:18:30 -0700
> Received: from b27.c30.bise6.blackberry ([192.168.0.127])
> by srs.bis6.us.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id
> p9LGIUNj011172
> for <user@xxxxxxxxxxxxxxxx>; Fri, 21 Oct 2011 16:18:30 GMT
> Received: from 172.29.223.199 (cmp29.c30.bise6.blackberry [172.29.223.199])
> by b27.c30.bise6.blackberry (8.13.7 TEAMON/8.13.7) with ESMTP id
> p9LGIT7M003453
> for <user@xxxxxxxxxxxxxxxx>; Fri, 21 Oct 2011 16:18:29 GMT
> X-rim-org-msg-ref-id: 1251677768
> Message-ID:
> <1251677768-1319213909-cardhu_decombobulator_blackberry.rim.net-1903184366-@xxxxxxxxxxxxxxxxxxxxxxx>
> Reply-To: user1@xxxxxxxxxxxxxxxx
> X-Priority: Normal
> Sensitivity: Normal
> Importance: Normal
> Subject: [SPF] Fw: Your Sweet City Candy order
> To: "Dad" <user@xxxxxxxxxxxxxxxx>
> From: user1@xxxxxxxxxxxxxxxx
> Date: Fri, 21 Oct 2011 16:18:28 +0000
> Content-Type: multipart/alternative;
> boundary="part2749-boundary-503454095-1448843816"
> MIME-Version: 1.0
> X-Assp-Version: 1.9.1.8(1.1.00) on assp.mydomain.com
> X-Assp-Delay: user@xxxxxxxxxxxxxxxx not delayed (auto accepted);
> 21 Oct 2011 09:18:30 -0700
> X-Assp-Score: 5 (SPF softfail)
> X-Assp-Envelope-From: user1@xxxxxxxxxxxxxxxx
> X-Assp-ID: assp.mydomain.com 31921-00469
> X-Assp-Spam: YES
> X-Assp-Original-Subject: Fw: Your SCC order
> X-Spam-Status:YES
> X-Assp-Spam-Reason: SPF softfail
> X-Assp-Message-Totalscore: 5
> X-Assp-Intended-For: user@xxxxxxxxxxxxxxxx
> X-Assp-Copy-Spam: Yes
>
Looks like a backberry issue but you would have to look at their SPF record.
However, check what you are doing on SPF handling as normally a softfail will
just accumulate score and the score is too low to call it spam.
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq
Other related posts:
