Issue with SPF Filter

Discussion forum for Enterprise Edition.
Post Reply
RomLinker
Posts: 10
Joined: Mon Oct 08, 2007 4:35 pm

Issue with SPF Filter

Post by RomLinker » Fri Sep 05, 2014 10:11 am

I have enable the SPF filter but sometimes spf works bad. Whe i recived an email with miltiple hop's spf check the first hop instead the last hop and rejected the email. Here an example:

Code: Select all

Received: from ([127.0.0.1]) with MailEnable ESMTP; Wed, 20 Aug 2014 14:21:42 +0200
Received: from DBXPR05CA0040.eurprd05.prod.outlook.com (10.255.178.40) by  DB4PR05MB0783.eurprd05.prod.outlook.com(25.161.16.143) with Microsoft SMTP  Server (TLS) id 15.0.1010.18; Wed, 20 Aug 2014 12:21:42 +0000
Received: from AM1FFO11FD045.protection.gbl (2a01:111:f400:7e00::144) by  DBXPR05CA0040.outlook.office365.com(2a01:111:e400:9434::40) with Microsoft  SMTP Server (TLS) id 15.0.1015.17 via Frontend Transport; Wed, 20 Aug 2014
 12:21:42 +0000
Received: from CENEX05.server.local ([b]91.240.252.93[/b]) by  AM1FFO11FD045.mail.protection.outlook.com (10.174.65.208) with Microsoft SMTP  Server (TLS) id 15.0.1010.11 via Frontend Transport; Wed, 20 Aug 2014
 12:21:42 +0000
Received: from CENEX06.server.local ([169.254.2.178]) by  CENEX05.server.local ([169.254.1.62]) with mapi id 14.03.0123.003; Wed, 20  Aug 2014 14:21:45 +0200
From: Jhon Smith <xxxx@yyyyy.com>
To: =Mike <aaaaa@bbbbb.com>
Subject: Test
Thread-Topic: Test
Thread-Index: Ac+nYA1gzYdMl6uvq0WmqkEvj0BnhgAbQEaABSj/B6A=
Date: Wed, 20 Aug 2014 12:21:44 +0000
Message-ID: <54B2D830D25AE94F9C5F54174AEE308A777CA022@CENEX06.server.local>
References: <349A08C9FBD91F49A7A5C6F960E162AF8838ED@srv-sbs.pichard.neu>
 <4EAFDA13EB02CF4B952EAC652D77CA95018E75B0@SERVER.domain.local>
In-Reply-To: <4EAFDA13EB02CF4B952EAC652D77CA95018E75B0@SERVER.domain.local>
Accept-Language: sv-SE, en-US
Content-Language: sv-SE
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Content-Type: multipart/related;
        boundary="_004_54B2D830D25AE94F9C5F54174AEE308A777CA022CENEX06Server_";
        type="multipart/alternative"
MIME-Version: 1.0
Return-Path: xxxx@yyyyy.com
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report:
        CIP:91.240.252.93;CTRY:;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(479174003)(377454003)(189002)(252514010)(51874003)(38564003)(71364002)(199003)(86362001)(229853001)(31966008)(74662001)(74502001)(6806004)(512934002)(106466001)(110136001)(87936001)(50986999)(84326002)(83072002)(92566001)(92726001)(2656002)(15975445006)(19618635001)(85852003)(15974865002)(19580395003)(68736004)(54356999)(44976005)(74482001)(84676001)(15202345003)(107886001)(19580405001)(98436002)(83322001)(18206015026)(95666004)(76482001)(19617315012)(46102001)(19627595001)(107046002)(104016003)(55846006)(79102001)(77982001)(105606002)(33656002)(19625215002)(66926002)(97736001)(551944002)(21056001)(85306004)(16236675004)(99396002)(71186001)(81342001)(67866002)(80022001)(20776003)(64706001)(77096002)(76176999)(85806002)(4396001)(99936001)(81542001)(16601075003)(17760045003)(579004)(15409205003);DIR:OUT;SFP:;SCL:1;SRVR:DB4PR05MB0783;H:CENEX05.server.local;FPR:;MLV:sfv;PTR:InfoDomainNonexistent;MX:1;A:1;LANG:es;
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;UriScan:;
X-Forefront-PRVS: 03094A4065
Received-SPF: Fail (protection.outlook.com: domain of yyyyy.com does not  designate 91.240.252.93 as permitted sender) receiver=protection.outlook.com;  client-ip=91.240.252.93; helo=CENEX05.server.local;
Authentication-Results: spf=fail (sender IP is 91.240.252.93)  smtp.mailfrom=xxxx@yyyyy.com;
X-OriginatorOrg: yyyyy.com
Why SFP filter check IP 91.240.252.93 of first hop instead IP 25.161.16.143 of last hop?

The IP-address 91.240.252.93 is only used internally to communicate between our mail servers and Microsoft,s Exchange Online Protection services.

Thanks, and sorry for my english.

Post Reply