> У вас отправка идет с тех же серверов, что и являються mx
> записями??? Если да- то у вас не один из этих серверов
> явно по spf не разрешен.Спасибо вам друзья за ответы, да сервер почтовый тот, на который указывает mx запись. Момент только такой:
Этот ip (prem-ekb.ru:94.31.161.3) он 25-ый порт пробрасывает внутрь сети а почтовик сам сидит в локалке а не напрямую в инете. Может из-за этого быть проблема?
SPF запись я добавил, только почему то при проверке с помощью сервиса verifier.port25.com после добавления SPF записи, статус spf проверки сменился с neutral на softfail (у меня ощущение что softfail хуже чем neutral)
И ещё почему Spamassassin тест выдал статус ham?
Весь лог проверки выкладываю ниже.
Спасибо за помощь, прошу по возможности продолжения :)
This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com. The service allows email senders to
perform
a simple check of various sender authentication mechanisms. It is provided
free of charge, in the hope that it is useful to the email community.
While
it is not officially supported, we welcome any feedback you may have at
<verifier-feedback@port25.com>;.
Thank you for using the verifier,
The Port25 Solutions, Inc. team
==========================================================
Summary of Results
==========================================================
SPF check: softfail
DomainKeys check: neutral
DKIM check: neutral
Sender-ID check: softfail
SpamAssassin check: ham
==========================================================
Details:
==========================================================
HELO hostname: mx.prem-ekb.ru
Source IP: 94.31.161.3
mail-from: mailuser@prem-ekb.ru
----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: softfail (SPF-Result: SoftFail)
ID(s) verified: smtp.mail=mailuser@prem-ekb.ru
DNS record(s):
prem-ekb.ru. SPF (no records)
prem-ekb.ru. 14400 IN TXT "v=spf1 ~all"
----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified: header.From=mailuser@prem-ekb.ru
DNS record(s):
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: neutral (message not signed)
ID(s) verified:
NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.
----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result: softfail (SPF-Result: SoftFail)
ID(s) verified: header.From=mailuser@prem-ekb.ru
DNS record(s):
prem-ekb.ru. SPF (no records)
prem-ekb.ru. 14400 IN TXT "v=spf1 ~all"
----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.2.5 (2008-06-10)
Result: ham (4.0 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.4876]
2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
1.8 MISSING_SUBJECT Missing Subject: header
==========================================================
Explanation of the possible results (adapted from
draft-kucherawy-sender-auth-header-04.txt):
==========================================================
"pass"
the message passed the authentication test.
"fail"
the message failed the authentication test.
"softfail"
the message failed the authentication test, and the authentication
method has either an explicit or implicit policy which doesn't
require
successful authentication of all messages from that domain.
"neutral"
the authentication method completed without errors, but was unable
to reach either a positive or a negative result about the message.
"temperror"
a temporary (recoverable) error occurred attempting to
authenticate
the sender; either the process couldn't be completed locally, or
there was a temporary failure retrieving data required for the
authentication. A later retry may produce a more final result.
"permerror"
a permanent (unrecoverable) error occurred attempting to
authenticate the sender; either the process couldn't be completed
locally, or there was a permanent failure retrieving data required
for the authentication.
==========================================================
Original Email
==========================================================
Return-Path: <mailuser@prem-ekb.ru>;
Received: from mx.prem-ekb.ru (94.31.161.3) by verifier.port25.com
(PowerMTA(TM) v4.0b4) id htudnm11u9c5 for
<check-auth@verifier.port25.com>;; Wed, 8 Jun 2011 11:55:39 -0400
(envelope-from <mailuser@prem-ekb.ru>;)
Authentication-Results: verifier.port25.com smtp.mail=mailuser@prem-ekb.ru;
mfrom=softfail (SPF-Result: SoftFail);
Authentication-Results: verifier.port25.com header.From=mailuser@prem-ekb.ru;
domainkeys=neutral (message not signed);
Authentication-Results: verifier.port25.com; dkim=neutral (message not
signed);
Authentication-Results: verifier.port25.com header.From=mailuser@prem-ekb.ru;
pra=softfail (SPF-Result: SoftFail);
Received: from BSD-mydom.mydom.local (localhost [127.0.0.1])
by mx.prem-ekb.ru (Postfix) with ESMTP id 7C2043570299
for <check-auth@verifier.port25.com>;; Wed, 8 Jun 2011 21:55:34 +0600
(YEKST)
X-Virus-Scanned: by Amavisd-New and ClamAV at mx.prem-ekb.ru
Received: from mx.prem-ekb.ru ([127.0.0.1])
by BSD-mydom.mydom.local (BSD-mydom.mydom.local [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id Ny+jeszr2fM4 for <check-auth@verifier.port25.com>;;
Wed, 8 Jun 2011 21:55:27 +0600 (YEKST)
Received: from mydom-pdc.mydom.local (mydom-pdc.mydom.local [192.168.5.3])
by mx.prem-ekb.ru (Postfix) with ESMTPA id E1F453570276
for <check-auth@verifier.port25.com>;; Wed, 8 Jun 2011 21:55:27 +0600
(YEKST)
Content-Type: multipart/alternative;
boundary=----------foU0E9C7GuMLrb1jxUu53a
Organization: =?utf-8?B?0J7QntCeICLQn9GA0LXQvNGM0LXRgC3QodGC0YDQvtC5Ig==?=
To: check-auth@verifier.port25.com
MIME-Version: 1.0
From: =?utf-8?B?0JPRg9C70Y/QtdCyINCT0L7RiNCw?= <mailuser@prem-ekb.ru>;
Date: Wed, 08 Jun 2011 21:55:27 +0600
Message-ID: <op.vwrk6pu1va6isq@mydom-pdc.mydom.local>;
User-Agent: Opera Mail/11.11 (Win32)
------------foU0E9C7GuMLrb1jxUu53a
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
Content-Transfer-Encoding: Base64
DQoNCi0tIA0K0J3QsNC/0LjRgdCw0L3QviDQsiDQv9C+0YfRgtC+0LLQvtC8INC6
0LvQuNC10L3RgtC1INCx0YDQsNGD0LfQtdGA0LAgT3BlcmE6IGh0dHA6Ly93d3cu
b3BlcmEuY29tL21haWwv
------------foU0E9C7GuMLrb1jxUu53a
Content-Type: multipart/related; boundary=----------foU0E9C7GuMLrbwZ6VRgVo
------------foU0E9C7GuMLrbwZ6VRgVo
Content-Type: text/html; charset=utf-8
Content-ID: <op.1307548527319.14fd2d546d5c3c8b@192.168.5.3>;
Content-Transfer-Encoding: Quoted-Printable
<!DOCTYPE html><html><head>
<style type=3D"text/css">body { font-family:'Times New Roman'; font-size=
:13px}</style>
</head><body><div>
</div><div id=3D"M2Signature"><div>-- </div><d=
iv>=D0=9D=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BD=D0=BE =D0=B2 =D0=BF=D0=BE=D1=
=87=D1=82=D0=BE=D0=B2=D0=BE=D0=BC =D0=BA=D0=BB=D0=B8=D0=B5=D0=BD=D1=82=D0=
=B5 =D0=B1=D1=80=D0=B0=D1=83=D0=B7=D0=B5=D1=80=D0=B0 Opera: <a href=3D"h=
ttp://www.opera.com/mail/">http://www.opera.com/mail/</a></div></div>...
ody></html>
------------foU0E9C7GuMLrbwZ6VRgVo--
------------foU0E9C7GuMLrb1jxUu53a--
Вариант для распечатки
