SPF (Sender Policy Framework) - SPF Check

Support General Configuration
1

Hello,
I buyed few years ago licence for version 7.5.
This week i tried Enable SPF but server stop working if i select option “Reject the message” for If no SPF records published and If SPF records cannot be checked.
I mean if i use this setup server dont accept send my emails and dont receive email.
I have SPF for my domain ovodesign.com.

Please help me.

2

Hello
What dns servers do you defined in DRN Service?
If you use local DNS server you also need to create SPF record in it.

3

Capture
Capture.JPG738×197 21.1 KB

Hello,
I use local DNS server and added to DNR Service.
DNS server isnt installed on axigen machine.

4

Hi
you need to create an SPF record in your DNS server (192.168.0.40)

5

its created but dont work.
I checked SPF configuration https://mxtoolbox.com/spf.aspx and work.

6

Hello Costel,

Instead of trying to guess whats the root cause please let us know:
1/ your current Axigen version and on which OS
2/ your smtpFilters.script (you could obtained it from its default location /var/opt/axigen/filters)
3/ log file related to a test for sending an outgoing message (for example to Gmail or Yahoo)
4/ log file related to a test for receiving an incoming message (for example from Gmail or Yahoo)

Note - Before making above tests please set log level to Protocol Communication for the following services:

  • SMTP Receiving
  • SMTP Outgoing
  • Processing
  • DNR

Looking forward for your data.

BR,
Ioan

PS: Usually the SPF check should be enabled only for on mailFrom with Deliver the message for cases when no SPF record or for errors in the SPF record itself - more details could be found here

7
  1. Axigen Version 7.5, OS : Fedora 13 x86
    2.smtpFilters.zip (1.7 KB)
  2. I cant send any email if activate SPF check. See attached photoCapture
    Also i not receive any email after activate SPF check.Logs.zip (156.8 KB)

Thank you

8

Hello Costel,

First of all I’m sure you know that you are using a very old version of Axigen.

Secondly, from the logs you have provided I could not identify the SMTP session for which you have provided the screen capture from above (most probably because I have no clue of the timestamp and IP address of your station).

Therefore please follow these steps:

1/ Double check if your mail client is configured to send the message using an Authenticated session

2/ Enable SPF only on MailFrom + choose Deliver the message for both If questions
Note: from provided logs I see that the SPF check for on Ehlo was enabled as well - please avoid this setup

3/ save the smtpFilters.script file so we could double check what you have selected for SPF check

4/ try to send a message to an external recipient, saving the timestamp, the IP address of your station and From and To details

5/ provide us the SMTP-IN, PROCESSING and DNR logs , checking that them cover the period of time when you have tried to send the message

Looking forward for the mentioned data.

BR,
Ioan

9

Hello,
thank you for your reply.

  1. My email client is configured to send the message using an Authenticated session
  2. I dont know how i can enable from admin interface SPF for MailFrom.
    I think i can do this only change smtpFilters.script. Right ?
  3. I cant select deliver the message If add in smtpFilters.script file to function event onMailFrom this lines
    call (checkSPF);
    ** call (WA_AntiSpam_SPF_Err);**
    ** call (WA_AntiSpam_SPF_None);**
    After change smtpFilters.script in web admin If no SPF records published and If SPF records cannot be checked cannot be changed because by default option is set Reject the message. I can select Deliver the message but not save
    Capture
    Capture.JPG1680×817 187 KB

    I make test with this configuration and i receive less spams but i cant receive email from verry more servers like gmail.com

08-07 18:46:08 +0300 08 email SMTP-IN:00000062: …: Set smtp action to REJECTLogs.zip (150.3 KB)

10

Hello Costel,

I’m sorry if you could not select “Deliver message” for both “if” conditions from SPF setup. It is a clear sign that you have to upgrade to the latest available version (Axigen 10.2.2), most probably via “automatic migration” procedure.

All my bests,
Ioan

11

If i will install last version my license will work ?