SPF record issues and RIM networks - ArGoStuff - Forums - General Discussion Forums

	Register Login
	May 19, 2012

SearchWebSite

You are here: Forums

Home
ArGoStuff
       About
       ArGoStuff Supporters
       Forum Posting Policy
Forums
Articles
       Articles Archive
Cyber Security Tips
FAQ
Downloads
Links

Top 10 Links

Well Known Port Numbers	3146

Can Spam Act Information	2434

Cobri Computer Services	2113

Port Detective	2043

DotNetNuke (DNN)	1888

Test Virus Sender	1861

Network Abuse Clearinghouse Mail Relay Ttesting	1828

DNNDEV	1045

ZTree	801

Ventrian Systems	512

ArGoStuff User to User Support Forums

Unanswered Active Topics

Forums Search

Forums > General Discussion Forums > Error Code Discussion and DNS Issues

SPF record issues and RIM networks

Last Post 17 Dec 2006 09:57 AM by Robin -. 8 Replies.

Sort:

	Prev
You are not authorized to post a reply.

Author

Messages

Kyle -

Basic Member

Posts:156

15 Dec 2006 11:56 PM
I'm still fairly new to SPF records. I have one now and it worked fine until I got my blackberry. Emails are sent using the RIM networks' SMTP servers rather than passing through my AMS. I found where others had the issue and added their IP blocks to my SPF but it is still being rejected. SteveT, it's actually your server rejecting it. v=spf1 a mx ptr ip4:ip4:206.51.26.0/24 ip4:ip4:193.109.81.0/24 ip4:ip4:216.9.240.0/20 ip4:ip4:204.187.87.0/24 -all The reason for the problem: 5.1.0 - Unknown address error 554-'Rejected by SPF: (-) The 216.9.248.48 is in the not permitted set' 216.9.248.48 is in the 216.9.240.0/20 block. Any ideas?

Computing`s worst enemy......a user http://www.mbrostech.com

Steve Topilnycky User is Offline

Forum Administrator

Veteran Member

Posts:1300
Avatar

16 Dec 2006 01:17 AM
Kyle, Robin is the SPF/DNS expert. I have my SPF set to Hard Fail only. I checked my logs 12/15/2006 5:25:13 PM - ( 2100) SPF result: (+) The 70.164.23.228 is in the permitted set. Accepting... 12/15/2006 8:43:50 PM - ( 2398) SPF result: (-) The 216.9.248.52 is in the not permitted set. Rejecting... 12/15/2006 8:43:50 PM - ( 2398) 554 Rejected by SPF: (-) The 216.9.248.52 is in the not permitted set Now this is the SPF you posted: v=spf1 a mx ptr ip4:ip4:206.51.26.0/24 ip4:ip4:193.109.81.0/24 ip4:ip4:216.9.240.0/20 ip4:ip4:204.187.87.0/24 -all You have IP block 216.9.240.0 and the IP address was from block 216.9.248.0. Are you sure they are in the same block. I'm extremly rusty on IP configs like this.

- - - - - - - Regards, Steve Topilnycky Top Cat Computing http://www.topcatcomputing.com/

Kyle -

Basic Member

Posts:156

16 Dec 2006 01:58 AM
the 216.9.240.0/20 would include 216.9.240.0 - 216.9.255.255

Computing`s worst enemy......a user http://www.mbrostech.com

Robin -

Veteran Member

Posts:2289

16 Dec 2006 05:54 PM
According too CIDR blackberry UK (RIM) only has the following subnets http://www.cidr-report.org/cgi-bin/...as=AS29136 NetRange: 216.9.240.0 - 216.9.255.255 CIDR: 216.9.240.0/20 NetName: RIM-NET-02 NetHandle: NET-216-9-240-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: XNS01YKF.RIM.NET NameServer: XNS01LHR.RIM.NET Comment: RegDate: 2002-07-19 Updated: 2006-10-19 Assuming your mail server of choice allows for wild card or subnet specification in its white list this range should cover all possibilities. The below will address all SPF issues with Blackberrys network An SPF record that covers all of blackberry's SMTP relay subnets. This information was passed on by Blackberry tech support ip4:206.51.26.0/24 ip4:193.109.81.0/24 ip4:216.9.240.0/20 ip4:204.187.87.0/24 Robin

Kyle -

Basic Member

Posts:156

16 Dec 2006 09:33 PM
Robin, that block of IP's includes 216.9.248.52 This is my SPF. It has the information from blackberry support. v=spf1 a mx ptr ip4:ip4:206.51.26.0/24 ip4:ip4:193.109.81.0/24 ip4:ip4:216.9.240.0/20 ip4:ip4:204.187.87.0/24 -all

Computing`s worst enemy......a user http://www.mbrostech.com

Robin -

Veteran Member

Posts:2289

16 Dec 2006 11:42 PM
Check this tool and it will allow you too verify spf records http://www.politemail.com/check-spf...EAod_QwcPw It seems as if blackberry.com or even rim.net are not reporting thier SPF properly.. In this case this needs to be addressed again with Blackberry and rim Robin

Kyle -

Basic Member

Posts:156

16 Dec 2006 11:51 PM
I wonder why I didn't see this before: v=spf1 a mx ptr ip4:ip4:206.51.26.0/24 ip4:ip4:193.109.81.0/24 ip4:ip4:216.9.240.0/20 ip4:ip4:204.187.87.0/24 -all I've updated and trying again

Computing`s worst enemy......a user http://www.mbrostech.com

Steve Topilnycky User is Offline

Forum Administrator

Veteran Member

Posts:1300
Avatar

17 Dec 2006 12:54 AM
Kyle, Geeze, I didn't notice it either... I guess that is where your problem is..

- - - - - - - Regards, Steve Topilnycky Top Cat Computing http://www.topcatcomputing.com/

Robin -

Veteran Member

Posts:2289

17 Dec 2006 09:57 AM
Me neither I never even checked Kyles domain all I did was some research into RIM and blackberry networks.. Robin

You are not authorized to post a reply.

Forums > General Discussion Forums > Error Code Discussion and DNS Issues

Active Forums 4.2

Donations

Find our site useful? Make a donation to show your support

ArGoStuff Supporters

News from ArGoSoft

1 2 3 4 5 6

Mail Server v1.0.8.3

Added support of STARTTLS (STLS) command for SMTP, POP3, IMAP, and SMTP relay and delivery, which will allow secure, fully encrypted connections, when possible;

11/6/2011 1:10:34 PM

Mail Server v1.0.8.2

Optimized delivery speed. In earlier versions each "tick" which was checking whether messages were in the outbox queue, was picking up only one message at a time. Now it will attempt to pick MaximumAllowedThreads-ActiveDelivery threads messages, which should considerably increase deliver speed;
Optimized SEARCH and STATUS IMAP commands. They appear to be used very extensively by Android, and (not that extensively, but still) by iPhone. Now users who use mobile phones to access their IMAP accounts will see considerable improvement;
Optimized STORE IMAP command. Before storing of IMAP flags was occuring one message at a time, which seemed to be fine with SQL server, but proved to be slow for SQLite... Now it happens with single SQL call.

10/8/2011 7:59:35 PM

ArGoSoft Mail Server v1.0.8.1

Fixed a bug: when using IMAP via Firefox with "When I delete a message, move it to Trash folder" option, marking messages in the trash folder was causing high CPU usage, and was taking some time, making the server pretty much non-responsive. The problem was happening only when using SQLite.

6/6/2011 9:33:36 PM

ArGoSoft Mail Server v1.0.8.0

Fixed a problem with web interface - was showing only first page of messages, and would not switch to other pages; In order to fix the web interface, mail server itself has to be updated;
When installint initially, was still using SQLite, even when SQL was requested;
There was a problem with switching from SQLite database engine to SQL server database engine: the SQL database was not being created;

5/23/2011 5:53:55 PM

ArGoSoft Mail Server .NET v1.0.7.9

The server no longer requires Microsoft SQL Server. If SQL server is not found, it will use SQLite engine, which does not require separate installation. If SQL server is found, then user will be prompted whether he wants to use it;
Made other improvements, such as, now mailbox rebuild indexes orphaned records, rather then deleting them, also added an opotion to increment UIDL validity of folder (both on the Mailbox viewer box);
Made minor improvements on web interface;

4/26/2011 9:47:25 PM

1 2 3 4 5 6

Home:ArGoStuff:Forums:Articles:Cyber Security Tips:FAQ:Downloads:Links
Copyright 2006-2011 by ArGoStuff Terms Of Use Privacy Statement