SPF fail with wrong IP

Well, I have SPF set up on my domains, or thought I did, but I found GMail was giving the error

Received-SPF: softfail (google.com: domain of transitioning X@X.com does not designate X.X.X.X as permitted sender

(my domain and IP removed…)

The problem being, the IP shown was an older IP I used to have and not my current IP…

Turns out, I still had some old IPs set in /etc/network/interfaces (Ubuntu server) and it seems only the last one was being used by Google mail for SPF purposes. So, the solution was to purge all unused IPs from there, and also set all IPs that I do use within the SPF record…

Giving something like, as I had two IPs remaining -

v=spf1 a ip4:X.X.X.X ip4:X.X.X.X include:aspmx.googlemail.com ~all

(the include is for Google Apps)

Leave a Reply