Email

如何設置 spf 記錄以將郵件從Google託管的應用程序發送到 gmail 地址

  • January 11, 2012

我試圖弄清楚為什麼我從我擁有的一個域發送的電子郵件被我擁有的另一個域拒絕,雖然我認為這可能與我設置 spf 記錄的方式有關,但我不確定我需要哪些步驟採取修復它。

這是我收到的錯誤消息:

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550-Verification failed for <chris@stemcel.co.uk>
550-No Such User Here
550 Sender verify failed (state 14).

這是來自 check-auth@port25.com 的回复

Delivered-To: chris@stemcel.co.uk
Received: by 10.86.92.9 with SMTP id p9cs85371fgb;
       Wed, 2 Sep 2009 22:33:32 -0700 (PDT)
Received: by 10.90.205.4 with SMTP id c4mr2406190agg.29.1251956007562;
       Wed, 02 Sep 2009 22:33:27 -0700 (PDT)
Return-Path: <auth-results@verifier.port25.com>
Received: from verifier.port25.com (207-36-201-235.ptr.primarydns.com [207.36.201.235])
       by mx.google.com with ESMTP id 26si831174aga.24.2009.09.02.22.33.25;
       Wed, 02 Sep 2009 22:33:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of auth-results@verifier.port25.com designates 207.36.201.235 as permitted sender) client-ip=207.36.201.235;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of auth-results@verifier.port25.com designates 207.36.201.235 as permitted sender) smtp.mail=auth-results@verifier.port25.com; dkim=pass header.i=auth-results@port25.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=auth; d=port25.com;
h=Date:From:To:Subject:Message-Id:In-Reply-To; i=auth-results@verifier.port25.com;
bh=GRMrcnoucTl4upzqJYTG5sOZMLU=;
b=uk6TjADEyZVRkceQGjH94ZzfVeRTsiZPzbXuhlqDt1m+kh1zmdUEoiTOzd89ryCHMbVcnG1JajBj
  5vOMKYtA3g==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=auth; d=port25.com;
b=NqKCPK00Xt49lbeO009xy4ZRgMGpghvcgfhjNy7+qI89XKTzi6IUW0hYqCQyHkd2p5a1Zjez2ZMC
  l0u9CpZD3Q==;
Received: from verifier.port25.com (127.0.0.1) by verifier.port25.com (PowerMTA(TM) v3.6a1) id hjt9pq0hse8u for <chris@stemcel.co.uk>; Thu, 3 Sep 2009 01:26:52 -0400 (envelope-from <auth-results@verifier.port25.com>)
Date: Thu, 3 Sep 2009 01:26:52 -0400
From: auth-results@verifier.port25.com
To: chris@stemcel.co.uk
Subject: Authentication Report
Message-Id: <1251955604-546582@verifier.port25.com>
Precedence: junk (auto_reply)
In-Reply-To: <4120a220909022232s345f2a1ag4c497d9c20c8810d@mail.gmail.com>

This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com.  The service allows email senders to perform
a simple check of various sender authentication mechanisms.  It is provided
free of charge, in the hope that it is useful to the email community.  While
it is not officially supported, we welcome any feedback you may have at
<verifier-feedback@port25.com>.

Thank you for using the verifier,

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         neutral
Sender-ID check:    pass
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname:  fg-out-1718.google.com
Source IP:      72.14.220.158
mail-from:      chris@stemcel.co.uk

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: smtp.mail=chris@stemcel.co.uk
DNS record(s):
   stemcel.co.uk. 14400 IN TXT "v=spf1 include:aspmx.googlemail.com ~all"
   aspmx.googlemail.com. 7200 IN TXT "v=spf1 redirect=_spf.google.com"
   _spf.google.com. 300 IN TXT "v=spf1 ip4:216.239.32.0/19 ip4:64.233.160.0/19 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ip4:74.125.0.0/16 ip4:64.18.0.0/20 ip4:207.126.144.0/20 ?all"

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: header.From=chris@stemcel.co.uk
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: 

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions.  If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: header.From=chris@stemcel.co.uk
DNS record(s):
   stemcel.co.uk. 14400 IN TXT "v=spf1 include:aspmx.googlemail.com ~all"
   aspmx.googlemail.com. 7200 IN TXT "v=spf1 redirect=_spf.google.com"
   _spf.google.com. 300 IN TXT "v=spf1 ip4:216.239.32.0/19 ip4:64.233.160.0/19 ip4:66.249.80.0/20 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:66.102.0.0/20 ip4:74.125.0.0/16 ip4:64.18.0.0/20 ip4:207.126.144.0/20 ?all"

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.2.5 (2008-06-10)

Result:         ham  (-2.6 points, 5.0 required)

pts rule name              description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS               SPF: sender matches SPF record
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                           [score: 0.0000]
0.0 HTML_MESSAGE           BODY: HTML included in message

按照此處的建議,我已經為我的域註冊了 spf 記錄

根據Kitterman 的 spf 記錄測試工具,這兩個域都通過了驗證,所以我對此有些困惑。

我還在這裡的 stemcel.co.uk 域上設置了包羅萬象的地址,但我沒有為 chrisadams.me.uk 設置一個設置。

相反,我們有以下轉發器設置

chris@chrisadams.me.uk  to  mail@chrisadams.me.uk   
hello@chrisadams.me.uk  to  mail@chrisadams.me.uk   
wave@chrisadams.me.uk     to    mail@chrisadams.me.uk   
mail@chrisadams.me.uk     to    chrisdaggimoh@gmail.com

任何想法如何讓這個工作?我不確定我應該在這裡尋找什麼。

如果您刪除 SPF 是否有效?

我發現它比它的價值更麻煩。它不會阻止您接收垃圾郵件,它只會(略微)減少人們以您的名義發送垃圾郵件的反向散射。

您是否嘗試過在 Google 應用中開啟“Catch-all Address”功能?如果您將其分配給使用者名,您至少可以判斷郵件是否正在到達您域的 Google Apps 實例。由於從上述錯誤看來,Google Apps 無法找到使用者,也許這將有助於診斷問題。

引用自:https://serverfault.com/questions/61844