[SOLVED] Log SPF activity poor

[rcarrillo]

Hi

It can be configured so that the SPF check is more detailed in the log, now stored in the log only when this check fails, and saves: "his server requires you to send from an IP address specified by the SPF for domain.com" and debug file: "Sender domain domain.com denied due to SPF failure" need to save more detailed information check SPF. it's possible?

Thanks

[MailEnable-Ian]

Hi,

What type of detailed information do you require to be logged?

[rcarrillo]

Hi again,

A detailed activity log of the SPF query that does when receiving an email.

What happens to me is that I get mail that should be rejected by SPF, can it be that the SPF query is not doing well? Or that certain emails do not pass through SPF?

Thanks in advance.

[MailEnable-Ian]

Hi,

Try and configure SMTP to higher level debug logging to see if this provides the information your looking for. Here is an article that explains how to enable this:

http://www.mailenable.com/kb/content/ar ... D=ME020585

[rcarrillo]

Hi,

thanks you for your response.

I've a problem with SPF, this is the following:

I have an incoming email which is 912453537@qq.com from the IP address 59.62.119.47 which is not authorized for sending by SPF policy of the qq.com domain. Mailenable does not reject such mail, even though it is set to reject it. Attached log:

09/24/17 00:07:56 ME-E0113: [1040] Message marked as spam: (59.62.119.47) was found in DNS blacklisted database Barracuda Reputation Block List.
09/24/17 00:07:56 ME-IXXXX: [1040] Resolve3: NDR/bulk setting 0
09/24/17 00:07:56 ME-IXXXX: [1040] Resolve: NDR/bulk setting 0,
09/24/17 00:07:56 ME-IXXXX: [1040] Performing SPF lookup on sender [SMTP:912453537@qq.com]
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486096, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 include:spf.mail.qq.com -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) SPF record returned is: (v=spf1 include:spf.mail.qq.com -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42348416, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) SPF record returned is: (v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-a.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486576, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) SPF record returned is: (v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-a.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-b.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42342624, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24 ip4:58.250.132.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) SPF record returned is: (v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24 ip4:58.250.132.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-b.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-c.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42485472, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) SPF record returned is: (v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-c.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-d.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42342656, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24 ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) SPF record returned is: (v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24 ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-d.mail.qq.com) Valid SPF version detected
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) Checking DNS for SPF Records..
09/24/17 00:07:56 ME-IXXXX: Searching DNS Server (192.168.21.21) for SPF records for:spf-e.mail.qq.com
09/24/17 00:07:56 ME-IXXXX: PTR 42486576, Result type:16
09/24/17 00:07:56 ME-IXXXX: Record count:1
09/24/17 00:07:56 ME-IXXXX: TXT item:v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24 ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:49.51.132.0/24 -all
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) DNS SPF query returned with status 1
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) SPF record returned is: (v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24 ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:49.51.132.0/24 -all)
09/24/17 00:07:56 ME-IXXXX: [SPF] (spf-e.mail.qq.com) Valid SPF version detected

What can be happening?

Thanks in advance

[MailEnable-Ian]

Hi,

Can you post up the SMTP activity log snippet of the SMTP transaction for the inbound message from 912453537@qq.com.

[rcarrillo]

here you go:

09/24/17 00:07:50 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 220 mail.xxxxxxxxxx.net ESMTP MailEnable Service, Version: 9.76--9.76 ready at 09/24/17 00:07:50 0 0
09/24/17 00:07:51 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 HELO HELO qq.com 250 Requested mail action okay, completed 43 13
09/24/17 00:07:52 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 MAIL MAIL FROM: <912453537@qq.com> 250 Requested mail action okay, completed 43 30
09/24/17 00:07:56 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 RCPT RCPT TO: <reservas@xxxxxxxxxx.net> 250 Requested mail action okay, completed 43 36
09/24/17 00:07:57 SMTP-IN C13559CF22DC4FCA89AA3B1E7D3E3F4C.MAI 1040 59.62.119.47 DATA DATA 354 Start mail input; end with <CRLF>. <CRLF> 46 6
09/24/17 00:07:59 SMTP-IN 29620FBCCEEE44C18D691457BD0446EB.MAI 1040 59.62.119.47 QUIT Quit 221 Service closing transmission channel 42 6

Is it what you wanted?

[rcarrillo]

Hi, MailEnable-Ian

Can you help me with this?

thanks you in advance

[nethub]

We got the same issue, the SPF function is not working, it is always "neutral' even we use non-permitted IP. qq.com is using -all which means non-permitted IP should return "Fail". From the email header added by MailEnable, we can see MailEnable handles it wrongly.

Received-SPF: neutral (hv.demo360.net: 218.213.216.100 is neither permitted nor denied by domain of qq.com)
client-ip=218.213.216.100

MailEnable version: Professional 10.14


This is the Debug log with debug level 10

Code: Select all

03/21/18 17:00:59	ME-IXXXX: [772] (Debug) Inbound connection from 218.213.216.100, family=2, port=25
03/21/18 17:00:59	ME-IXXXX: [772] Sender address valid
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for records for:qq.com
03/21/18 17:00:59	ME-IXXXX: [772] NDR/bulk setting 0
03/21/18 17:00:59	ME-IXXXX: [772] Resolve: NDR/bulk setting 0
03/21/18 17:00:59	ME-IXXXX: [772] Resolve2: NDR/bulk setting 0
03/21/18 17:00:59	ME-IXXXX: [772] Resolve3: NDR/bulk setting 0
03/21/18 17:00:59	ME-IXXXX: [772] Resolve: NDR/bulk setting 0, 
03/21/18 17:00:59	ME-IXXXX: [772] Performing SPF lookup on sender [SMTP:ewhwefwefw@qq.com]
03/21/18 17:00:59	ME-IXXXX: [SPF] (qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6590400, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 include:spf.mail.qq.com -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (qq.com) SPF record returned is: (v=spf1 include:spf.mail.qq.com -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6591552, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf.mail.qq.com) SPF record returned is: (v=spf1 include:spf-a.mail.qq.com include:spf-b.mail.qq.com include:spf-c.mail.qq.com include:spf-d.mail.qq.com include:spf-e.mail.qq.com)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-a.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf-a.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6590976, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-a.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-a.mail.qq.com) SPF record returned is: (v=spf1 ip4:103.7.28.0/24 ip4:103.7.29.0/24 ip4:112.90.139.0/24 ip4:113.108.23.0/24 ip4:113.108.11.0/24 ip4:113.108.67.0/24 ip4:119.147.16.0/24 ip4:119.147.193.0/24 ip4:119.147.194.0/24 ip4:119.147.20.0/24 ip4:120.196.211.0/24 ip4:59.78.209.0/24 -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-a.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-b.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf-b.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6590400, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24  ip4:58.250.132.0/24 -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-b.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-b.mail.qq.com) SPF record returned is: (v=spf1 ip4:14.17.32.0/24 ip4:14.17.43.0/24 ip4:14.17.44.0/24 ip4:14.17.21.0/24 ip4:183.60.52.0/24 ip4:183.60.61.0/24 ip4:183.60.8.0/24 ip4:183.62.104.0/24 ip4:184.105.206.0/24 ip4:184.105.67.0/24 ip4:203.205.160.0/24  ip4:58.250.132.0/24 -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-b.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-c.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf-c.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6591680, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-c.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-c.mail.qq.com) SPF record returned is: (v=spf1 ip4:54.179.177.0/24 ip4:183.57.50.0/24 ip4:59.37.110.0/24 ip4:54.204.34.0/24 ip4:54.206.16.0/24 ip4:54.206.34.0/24 ip4:54.207.19.0/24 ip4:54.207.22.0/24 ip4:54.238.142.0/24 ip4:54.238.162.0/24 ip4:54.243.244.0/24 ip4:58.251.149.0/24 -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-c.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-d.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf-d.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6590976, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24  ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-d.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-d.mail.qq.com) SPF record returned is: (v=spf1 ip4:58.250.134.0/24 ip4:54.254.200.0/24 ip4:54.92.39.0/24  ip4:103.7.31.0/24 ip4:14.17.18.0/24 ip4:112.90.142.0/24 ip4:113.108.91.0/24 ip4:119.147.14.0/24 ip4:180.153.3.0/24 ip4:183.60.60.0/24 ip4:183.62.126.0/24 ip4:211.139.188.0/24 -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-d.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-e.mail.qq.com) Checking DNS for SPF Records..
03/21/18 17:00:59	ME-IXXXX: Searching DNS Server (8.8.8.8) for SPF records for:spf-e.mail.qq.com
03/21/18 17:00:59	ME-IXXXX: PTR 6591552, Result type:16
03/21/18 17:00:59	ME-IXXXX: Record count:1
03/21/18 17:00:59	ME-IXXXX: TXT item:v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24  ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:52.59.177.0/24 ip4:18.194.254.0/24  -all
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-e.mail.qq.com) DNS SPF query returned with status 1
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-e.mail.qq.com) SPF record returned is: (v=spf1 ip4:203.205.176.0/24 ip4:14.215.153.0/24 ip4:14.215.154.0/24 ip4:14.215.155.0/24  ip4:183.61.51.0/24 ip4:183.61.52.0/24 ip4:163.177.87.0/24 ip4:220.249.245.0/24 ip4:52.59.177.0/24 ip4:18.194.254.0/24  -all)
03/21/18 17:00:59	ME-IXXXX: [SPF] (spf-e.mail.qq.com) Valid SPF version detected
03/21/18 17:00:59	ME-I0149: [772] 324AC237EACA4265AEF98ED501EB09A0.MAI was received successfully and delivery thread was initiated
03/21/18 17:00:59	ME-IXXXX: [772] (Debug) Checking message for URLs in blacklists
03/21/18 17:01:00	ME-IXXXX: [772] (Debug) Removing connection
03/21/18 17:01:00	ME-I0074: [772] (Debug) End of conversation

[MailEnable-Ian]

Hi,

We did find some problems in this area that would cause the invalid SPF detections. Please follow the steps below and apply the relevant SMTP patch to address the problem and let me know if the problems persists. The fix will also be included in the upcoming release.

1. Stop the SMTP service in the admin console.
2. Navigate to the MailEnable BIN64 (if running 64bit Windows otherwise the BIN folder for 32bit Windows).
3. Rename the existing SMTP service for backup. MESMTPC.exe to _MESMTPC.exe
4. Download the relevant SMTP patch below and extract the zip file to the MailEnable BIN64 if running 64bit Windows (or BIN if running 32bit windows) folder.

64bit Windows: https://www.mailenable.com/hotfix/mesmtpc_64.zip
32Bit Windows: https://www.mailenable.com/hotfix/mesmtpc_32.zip

5. Restart the SMTP service and test or monitor for the next incoming message from the same IP/domain.

[nethub]

Ian,

Great, I confirmed the patch works fine, thanks for quick response & fix.