[AusNOG] iiNet / Westnet - E-Mail Rejection from Office365

[Mark Andrews]

> On 23 Jun 2021, at 10:33, Peter Fern <ausnog at 0xc0dedbad.com> wrote:
> 
> On 22/6/21 11:26 pm, David Moyle wrote:
>> Hi AusNOG Team,
>> 
>>  
>> Chasing someone who can assist with iiNet / Westnet e-mail delivery – I have reports in the past week from clients running on Office365 (which I can also confirm with my own Office365 tenant) of SPF Failure when emailing into Westnet/iiNet.
>> 
> 
> 
> Your SPF record includes "spf.protection.outlook.com", which has no TXT records associated with it. Sounds like an Office365 problem.

Both servers are returning records for me currently.

% dig spf.protection.outlook.com txt @ns1-gtm.glbdns.o365filtering.com

; <<>> DiG 9.15.4 <<>> spf.protection.outlook.com txt @ns1-gtm.glbdns.o365filtering.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58363
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;spf.protection.outlook.com.	IN	TXT

;; ANSWER SECTION:
spf.protection.outlook.com. 600	IN	TXT	"v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/48 include:spfd.protection.outlook.com -all"

;; AUTHORITY SECTION:
protection.outlook.com.	600	IN	NS	ns2-gtm.glbdns.o365filtering.com.
protection.outlook.com.	600	IN	NS	ns1-gtm.glbdns.o365filtering.com.

;; Query time: 100 msec
;; SERVER: 104.47.121.8#53(104.47.121.8)
;; WHEN: Wed Jun 23 10:39:08 AEST 2021
;; MSG SIZE  rcvd: 297

% dig spf.protection.outlook.com txt @ns2-gtm.glbdns.o365filtering.com

; <<>> DiG 9.15.4 <<>> spf.protection.outlook.com txt @ns2-gtm.glbdns.o365filtering.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63477
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;spf.protection.outlook.com.	IN	TXT

;; ANSWER SECTION:
spf.protection.outlook.com. 600	IN	TXT	"v=spf1 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 ip6:2a01:111:f400::/48 ip6:2a01:111:f403::/48 include:spfd.protection.outlook.com -all"

;; AUTHORITY SECTION:
protection.outlook.com.	600	IN	NS	ns2-gtm.glbdns.o365filtering.com.
protection.outlook.com.	600	IN	NS	ns1-gtm.glbdns.o365filtering.com.

;; Query time: 106 msec
;; SERVER: 104.47.121.8#53(104.47.121.8)
;; WHEN: Wed Jun 23 10:39:15 AEST 2021
;; MSG SIZE  rcvd: 297

%
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org