Hi list. My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header: spf=temperror (mail01.r3pek.org: error in processing during lookup of no-reply at cttexpresso.pt: DNS error) I see the DNS request on my DNS server and a "working" reply going out. What can cause this error and/or how can I debug it?
Carlos Mogas da Silva skrev den 2022-12-19 11:57:> Hi list. > > My incoming messages are getting R_SPF_DNSFAIL and an error on the > Authentication-Results header: > > spf=temperror > (mail01.r3pek.org: error in processing during lookup of > no-reply at cttexpresso.pt: DNS error)for cttexpresso.pt netblocks are authorized 492,110 individual IPv4 addresses so many ips why not just +all in there spf ? for r3pek.org change spf to "v=spf1 ip4:195.201.255.103 ip6:2a01:4f8:c2c:4d63::3 -all" this will disable needs for dns resolve of ips, it might help while keeping it valid spf> I see the DNS request on my DNS server and a "working" reply going > out. What can cause this error > and/or how can I debug it?try avoid to many dns querys
On Mon, 19 Dec 2022, Carlos Mogas da Silva wrote:> Hi list. > > My incoming messages are getting R_SPF_DNSFAIL and an error on the > Authentication-Results header: > > spf=temperror > (mail01.r3pek.org: error in processing during lookup of > no-reply at cttexpresso.pt: DNS error) > > I see the DNS request on my DNS server and a "working" reply going out. What > can cause this error and/or how can I debug it?How (which program) is the SPF check being done? Dovecot doesn't do that (AFAIK anyway), so maybe you want to check which program (e.g. a postfix milter, such as rspamd) is doing that and check the logs of that program to see what went wrong. But I'm 99.9% sure this has nothing to do with dovecot :) Cheers, Bernardo