930026 - Email from Paul Adenot always gets trapped in Postini

Status: RESOLVED WONTFIX

(Infrastructure & Operations :: Infrastructure: Mail, task)

Description

[(no longer active)]

Every single email that Paul sends to me via his paul at paul.cx email address gets trapped into Postini.  I have probably missed lots of important emails from him. :(

Comment 1

[Ludovic Hirlimann [:Usul]]

Can we get such an email with complete headers ?

Did you whitelist paul in postini ?

Comment 2

[(no longer active)]

(In reply to Ludovic Hirlimann [:Usul] from comment #1)
> Can we get such an email with complete headers ?

I can forward one to whoever is interested.

> Did you whitelist paul in postini ?

No, I shouldn't have to do that!  :-)

Comment 3

[Dave Miller [:justdave]]

Go ahead and forward one to me.  Forward it as an attachment, so the headers stay intact, please.

Comment 4

[(no longer active)]

(In reply to comment #3)
> Go ahead and forward one to me.  Forward it as an attachment, so the headers
> stay intact, please.

Done!

Comment 5

[Dave Miller [:justdave]]

The problem is on Paul's end.  He has an SPF record defined for the paul.cx domain:

paul.cx descriptive text "v=spf1 include:mx.ovh.com ~all"

the rule pulled in by that include: directive is:

mx.ovh.com descriptive text "v=spf1 ptr:mail-out.ovh.net ptr:mail.ovh.net ?all"

mail-out.ovh.net has no IP address.
mail.ovh.net has address 213.186.33.220

So according to his DNS setup, the only host permitted to send email from the paul.cx domain is 213.186.33.220

The email you forwarded was sent from 66.111.4.27.

If he wants his mail to not be blocked, he needs to update his SPF record to include the places he's actually sending email from.

Comment 6

[Dave Miller [:justdave]]

(or actually send his email from the places he's defined as being legal to send from)

Comment 7

[(no longer active)]

Thanks for the analysis, Dave!  Paul, it's on your plate now.  (FWIW I think any email that you have sent to moco folks might be affected.)

Comment 8

[Paul Adenot (:padenot)]

Interesting to know, and thanks for the analysis, I'll take the appropriate measures. I've been using this email to send Moco people emails for years, though, maybe Postini recently woke up an decided to block me.

Comment 9

[:Atoll]

Yes, Postini SPF filtering was enabled recently, see bug 807414#c15.

Comment 10

[Amy Rich [:arr] [:arich]]

deleted bogus whiteboard tag

Comment 11

[Ed Lim [:limed]]

Nothing we can do on our end