1368198 - Missing SPF record is causing mozillians.org emails to be flagged as potential phishing/spam

Status: RESOLVED INVALID

(Participation Infrastructure :: Phonebook, defect)

Description

[Gene Wood [:gene]]

I received the email below which shows that there's no SPF record for mozillians.org. This results in Google flagging the email as potential phishing with a red stop sign with a question mark and this warning :

"Mozilla Mail couldn't verify that mozillians.org actually sent this message (and not a spammer)."

Please establish and SPF record so that email from mozillians.org doesn't get flagged like this :

Delivered-To: [e-mail]
Received: by 10.202.65.135 with SMTP id o129csp236731oia;
        Wed, 17 May 2017 06:52:35 -0700 (PDT)
X-Received: by 10.99.116.82 with SMTP id e18mr3874671pgn.1.1495029155174;
        Wed, 17 May 2017 06:52:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1495029155; cv=none;
        d=google.com; s=arc-20160816;
        b=UfoNCryhCdwgSjrwITHpr+F02whI55WvhNdL5dXwSD/SCWaqKEMZxQnRslQGbWBEB5
         h8+JM860J+uqDtoS20J3HwK4GCiSBWFLWSLF08K4mtrY0m5voU9VsxhULW8BZCXfWJc4
         VIMjDRWBV4f9TKyW1OlY4vHVFOLJb7oJ87fZZoqMMGC6vgvrylNFuVlxZCsiroivoXJT
         0rR9zv5M82g1sHyNaCCsPTwzzWgfb2X3ZEA+bI/sHAXMfOCmH+FMVW8FBV9AdUGRXxLr
         0Al4cxvwLNOfWnL3I5i7R+Ru2xLYiSkcmIbQIy+WhY28d+H52yypGRye1SsiUGuGr8Rj
         hOrQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=message-id:date:to:from:subject:content-transfer-encoding
         :mime-version:arc-authentication-results;
        bh=iCmqUc0c4FFC5lc3GZeov6fAEvYY9XVz5jwAvTFKZ44=;
        b=SdBexJPKZA1a93o8WZqrc5yGhKrZx5w5COnoTNLxpe+j2i31XKRpWbZFxxn1ZYd+yF
         zBfsqqapLv/6fsYl3GdjGUJeJVD1vWZwFQlizqGHXSC1i6AVrld2Op1z0KIXzYL7/MX5
         FgPioT1j3mQsOMzBqXh3r8LD3mwWDQTb2Z84AY/NeBFHjfKBY6pPldcLmhWOPJsTx07i
         dF80Fwbz6kHGayn7O7qhBdm2+UTHzGR2mruNdCJBNoFl2bqNZWfmly1H15osVsWc3FoI
         VXX5Kl4XcNN/2q5hW/AUOfVQuQN4ERvxI0sUHe+aysPRBqdXpFeHkedQ4y+3X3duauK/
         RChA==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=neutral (google.com: 63.245.214.155 is neither permitted nor denied by best guess record for domain of [e-mail]) smtp.mailfrom=[e-mail]
Return-Path: <[e-mail]>
Received: from smtp.mozilla.org (mx1.scl3.mozilla.com. [63.245.214.155])
        by mx.google.com with ESMTPS id x87si2139904pfa.290.2017.05.17.06.52.34
        for <[e-mail]>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 17 May 2017 06:52:35 -0700 (PDT)
Received-SPF: neutral (google.com: 63.245.214.155 is neither permitted nor denied by best guess record for domain of [e-mail]) client-ip=63.245.214.155;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 63.245.214.155 is neither permitted nor denied by best guess record for domain of [e-mail]) smtp.mailfrom=[e-mail]
Received: from localhost (localhost6.localdomain [127.0.0.1]) by mx1.mail.scl3.mozilla.com (Postfix) with ESMTP id 669E4C0D18 for <[e-mail]>; Wed, 17 May 2017 13:52:34 +0000 (UTC)
X-Virus-Scanned: amavisd-new at mozilla.org
Received: from smtp.mozilla.org ([127.0.0.1]) by localhost (mx1.mail.scl3.mozilla.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WdSn72P7xdjC for <[e-mail]>; Wed, 17 May 2017 13:52:34 +0000 (UTC)
Received: from python3.webapp.phx1.mozilla.com (python3.webapp.phx1.mozilla.com [10.8.81.162]) by mx1.mail.scl3.mozilla.com (Postfix) with ESMTPS id 46B78C2E7A for <[e-mail]>; Wed, 17 May 2017 13:52:34 +0000 (UTC)
Received: from python3.webapp.phx1.mozilla.com (unknown [127.0.0.1]) by python3.webapp.phx1.mozilla.com (Postfix) with ESMTP id 410CBC0715 for <[e-mail]>; Wed, 17 May 2017 13:52:34 +0000 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Subject: [Mozillians] Your membership to Mozilla group "example-mozillians-group" is about to expire
From: "Mozillians.org" <[e-mail]>
To: [e-mail]
Date: Wed, 17 May 2017 13:52:34 -0000
Message-ID: <[e-mail]>

Hello John Doe,

As per the terms of your membership to group "example-mozillians-group" your membership will expire in two weeks unless you are renewed by your group’s curators.

Your inviter has also been sent a notice for your renewal and will approve or reject your membership renewal in the next two weeks.

If you have any questions or concerns about your renewal please reach out to your inviter, Henrik Mitsch.

The Mozillians.org team

Comment 1

[Greg Cox [:gcox]]

This sounds specific to mozillians, which is decom'ed.
There are general/other SPF/DKIM/DMARC issues and I'm going to say that this is supplanted by the debt in those issues.