#1 2022-11-03 01:16:28

pirios
Člen
Místo: Bratislava
Registrován: 2011-08-28
Příspěvky: 48
Web

Problem s SPF na serveri kocicka.stable.cz

Dobry den.

Riesil som to intenzivne s podporou. Problem je s domenou dab-daniela.sk. Vysledok je taky, ze mam pouzivat SMTP spojenie (a to aj docasne pouzivam, aby bol beh zabezpeceny).

Lenze SMTP ma brutalne limity na odosielanie. Neda 400 mailov za hodinu a funkcia PHP mail() ma svoj vyznam.
Sice take pocty tato domena nikdy neprekroci, ale aj tak to ma fungovat tak ako to vzdy aj fungovalo.

Naproti tomu na surikate aj na slonici to ide BEZ problemov, spravny SPF, DMARC, spravne envelope-from aj return-path.

Odoslane notifikacie z dab-daniela.sk nemaju spravne SPF. Namiesto mailu 'info@dab-daniela.sk' tam da 'zakaznik@kocicka.stable.cz' a nie je to teda poslane v prospech mailu info@ (real schranka). Domena bezi v programe MEGA. Rovnake vysledky mam aj pri aliasoch. Domena funguje od 2012 a to bez vacsich chyb, vratane mailov cez php.

Na support som sa teda potom obratil s otazkou na DKIM kluce. Tak som si vytvoril svoj a ten pouzil na podpisovanie. To islo dobre a Gmail to prijal, ale do spamu, lebo SPF je stale chybne. Ale aspon som to uz konecne videl, lebo kym som tam nepridal DKIM, tak Gmail tento email ani neprijal kvoli SPF. Lenze Gmail nema az taku striktnu politiku a email nemusi mat DKIM signaturu, vyzaduje SPF, DMARC a spravne hlavicky bez duplicit.

Takto vyzera denny report poslany standardne cez mail() z domeny dabingforum.sk na Gmail:

Delivered-To: ***
Received: by 2002:a05:6a11:2617:b0:355:7721:5d29 with SMTP id tg23csp1293332pxb;
        Tue, 1 Nov 2022 19:20:29 -0700 (PDT)
X-Google-Smtp-Source: AMsMyM6XwlWGE3BQJ4y9s9sBGTYNTq/lgHUf5CK9hRpbUHL1oM8bu/F1L7qqcQFSiWeLjxKgHywS
X-Received: by 2002:a17:906:da85:b0:741:40a7:d08d with SMTP id xh5-20020a170906da8500b0074140a7d08dmr22349058ejb.263.1667355629195;
        Tue, 01 Nov 2022 19:20:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1667355629; cv=none;
        d=google.com; s=arc-20160816;
        b=eJxP66Jvsfsn5KvXuESvW57t9F9CFYitaGZbt9U2rFOp9brHdNaSHUvB3DIgLkgOO9
         uCVvHrA5xDnad/BypqT2j/n5pBEhalKjkwVQQXV8Gy0G2opMZuLjDf+lnWeG331h+hHO
         Uc6uIdZhW9YCh2AxvhRAcuBBGuXqAwPRjp3VZlvHY3qVXszXYrMuGUNzgNEbDMiBnZzl
         1g/SXNpiHdgBOFrFF2EPlCtcVhIc5RdY651s3I7367KV3gYOH7plbwNslx9PUvJK9tcm
         2TZkQyo6M3eSTg5p6Ym6NHBNDF9w9xf3vaADIahQaU2JBdlINmHYHLskzizoJQB5N7eN
         xynw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:message-id:from:mime-version:subject:to;
        bh=hfIcB6JfrMw2epna0lDRqTnuHzo2W0KZnvuhNLQ1soQ=;
        b=g97QOrHnRhZYvUXF2B9h4sU7NvUIYIsfbS9CQmCsKElUIauMKULX67GIDBkIDnNtsQ
         cSfI+ELXQ9s6UQNbPO+rPK2ZwXi0ETyaNVP+F0PSCzv8L0/P4D//BtedBUrp7VC+erae
         pWL83PMvDVWtNixNJqzkKWfjdQK29CeGlYYc31lr+calzQddTjgXJjloQ2VgZjKxalE4
         XhQgW9L/ik47XUB8KPItcwEBvLeimYLgqtlq22p2Kv76JATjChy9VKyE9W9Nvx4bOOL1
         qKK6jgzfY+HZW9yBP+5bSq977d5oMLccZ97GaF78tCr/CDaWABEvpPUyvzOTs4phbku1
         5i0A==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: domain of servis@dabingforum.sk designates 2001:1ab0:7e1e:220:ed:0:140:11 as permitted sender) smtp.mailfrom=servis@dabingforum.sk;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=dabingforum.sk
Return-Path: <servis@dabingforum.sk>
Received: from slonice.stable.cz ([2001:1ab0:7e1e:220:ed:0:140:11])
        by mx.google.com with ESMTPS id g18-20020a056402321200b00458b8d143b3si12611723eda.172.2022.11.01.19.20.28
        for <***>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 01 Nov 2022 19:20:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of servis@dabingforum.sk designates 2001:1ab0:7e1e:220:ed:0:140:11 as permitted sender) client-ip=2001:1ab0:7e1e:220:ed:0:140:11;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of servis@dabingforum.sk designates 2001:1ab0:7e1e:220:ed:0:140:11 as permitted sender) smtp.mailfrom=servis@dabingforum.sk;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=dabingforum.sk
Received: from zakaznik by slonice.stable.cz with local (Exim 4.92.3) (envelope-from <servis@dabingforum.sk>) id 1oq3Mi-0003fc-9d for ***; Wed, 02 Nov 2022 03:20:28 +0100
To: ***
Subject: ✔️ Záloha databázy dabingforum / 02.11.2022 03:20:06
X-PHP-Originating-Script: 3333:sqldump.php
MIME-Version: 1.0
From: "Servis www.dabingforum.sk" <servis@dabingforum.sk>
Message-ID: <dd603aa591a1e661888476727b7b79f4@dabingforum.sk>
Date: Wed, 02 Nov 2022 03:20:27 +0100
X-Mailer: www.dabingforum.sk / PHP 5.6.40
Content-Type: multipart/mixed; charset="UTF-8"; boundary="multipart_aa3fcc0f4544ae7a4950b4ce40cbc6a6"

Takto vyzeraju hlavicky z domeny dab-daniela.sk:
- toto je uz s pridanim DKIM a ten je logicky pass a je to poslane cez phpmailer class

Delivered-To: ***
Received: by 2002:a05:6a11:2617:b0:355:7721:5d29 with SMTP id tg23csp250730pxb;
        Wed, 2 Nov 2022 15:31:50 -0700 (PDT)
X-Google-Smtp-Source: AMsMyM5H5yaawYWzzxZeYR6sbNTIIFZR5elHOX1WCbiRNspO1YP9D2CBg4OptH1fnUBpjfeFAa0C
X-Received: by 2002:a17:907:2da3:b0:7ad:ffba:a8e4 with SMTP id gt35-20020a1709072da300b007adffbaa8e4mr5795691ejc.684.1667428310354;
        Wed, 02 Nov 2022 15:31:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1667428310; cv=none;
        d=google.com; s=arc-20160816;
        b=0tARreZ56fl16RB8whf4/dpHhNedbI+s6vWYXE9Khm1LO94deUUSuZJ5amaDmD9vHV
         GCc0ACUvNcOSWPaiAv8MofP2MZeKBqy+Y/MqGZlTN/wd5Nfz5fwhYqp1jKTqtUmwV93j
         TajYI1lRRrajvt3cJb3F8hiiHk1yM15/JTYeK7Hm4XPwReevO8qs5dppv9/QvnSNCyi5
         Ei27RwaeMEM0CPEFlFgB3rR6DAziN7KIS+AxAlyGpvrodndfSSNJr7m0hXt0PU3lQBuN
         AcOoPQNjOu1iPoiixz4Ge83dR7AYecB5NmqY2JmD+NZAPIMoIheOA88iZSaCodfDeSvl
         hxzA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=sender:dkim-signature:content-transfer-encoding:mime-version
         :message-id:reply-to:from:date:subject:to;
        bh=WrfwZXDwCNIGZElkKaW/cdUlluYYkd0hkMJseMhuxpw=;
        b=RRVnnMueBvzNNICVoC6hi2deJVWLXhO+nryU5IpXgX15V5CTcF4ilINY372nGFrlUk
         DuBVMvIQvW2md3v/K2QZBt6C6mh+Jjoht+yTpt32vfwmWomhuWciAz4FCBl5LLoI6k9K
         VxstjNcyqYroppLSwzevg9B0FEuRMj/w0lwhbNoLI3vCPY/i6ooa9CU9NK4htuJqhGsL
         lIZPlxWyxxdZg4Bg89fDdSukQGy/1r2rtK58bBFZqdoWFp3PMUEvG/VxO6r53bOKrJa1
         ASL07BuR0kRW7Vb4qH7ugxsmcxt2LbeIfVFB6UJDbh5u2VIX8zEqHXQemCgiLIE+XGO5
         c0bw==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass (test mode) header.i=@dab-daniela.sk header.s=5r9sk3z8us header.b=JxR39r4X;
       spf=neutral (google.com: 2001:1ab0:7e1e:220:ed:0:140:14 is neither permitted nor denied by best guess record for domain of zakaznik@kocicka.stable.cz) smtp.mailfrom=zakaznik@kocicka.stable.cz;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=dab-daniela.sk
Return-Path: <zakaznik@kocicka.stable.cz>
Received: from kocicka.stable.cz ([2001:1ab0:7e1e:220:ed:0:140:14])
        by mx.google.com with ESMTPS id d15-20020a056402400f00b00461a9ddbda7si16475299eda.90.2022.11.02.15.31.50
        for <***>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 02 Nov 2022 15:31:50 -0700 (PDT)
Received-SPF: neutral (google.com: 2001:1ab0:7e1e:220:ed:0:140:14 is neither permitted nor denied by best guess record for domain of zakaznik@kocicka.stable.cz) client-ip=2001:1ab0:7e1e:220:ed:0:140:14;
Authentication-Results: mx.google.com;
       dkim=pass (test mode) header.i=@dab-daniela.sk header.s=5r9sk3z8us header.b=JxR39r4X;
       spf=neutral (google.com: 2001:1ab0:7e1e:220:ed:0:140:14 is neither permitted nor denied by best guess record for domain of zakaznik@kocicka.stable.cz) smtp.mailfrom=zakaznik@kocicka.stable.cz;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=dab-daniela.sk
Received: from zakaznik by kocicka.stable.cz with local (Exim 4.92.2) (envelope-from <zakaznik@kocicka.stable.cz>) id 1oqMH0-0003pl-2y for ***; Wed, 02 Nov 2022 23:31:50 +0100
To: ***
Subject: Testovacia správa
X-PHP-Originating-Script: 3333:class.phpmailer.php
Date: Wed, 2 Nov 2022 23:31:49 +0100
From: DAB-Daniela <webmaster@dab-daniela.sk>
Reply-To: DAB-Daniela <webmaster@dab-daniela.sk>
Message-ID: <42c6de324feb526810464c85f72e6e82@www.dab-daniela.sk>
X-Priority: 3
X-Mailer: www.dab-daniela.sk
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_42c6de324feb526810464c85f72e6e82"
Content-Transfer-Encoding: 8bit
DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=502; s=5r9sk3z8us; t=1667428309; c=relaxed/simple; h=From:To:Subject; d=dab-daniela.sk; i=webmaster@dab-daniela.sk; z=From:=20DAB-Daniela=20<webmaster@dab-daniela.sk> |To:=20*** |Subject:=20=3D?UTF-8?Q?Testovacia_spr=3DC3=3DA1va?=3D; bh=6+KAtafXAxHTullnjmElME5927I=; b=JxR39r4X/+sKneVeuD76I+pXq+Nwmv0viB94pg3/BYvF/t733B7aBNMZ4hCDjXHmKo6DRmBPStW0EpC7T9agijvKBO2oFoKiBvTphdGB+HA1RPxFng0I632/DGwXP4/V0rUboyWNVN/x2UhxtAGGQ1K+okojA6oUpdSnONxFEk/Gx5jjxSxgsDrV/8JmQYmpeendC1k6RZYxG3CDS6hDoDxP1gGrgRQYQlVvnpz/vZfdN0sfpm5n40Eoj8GUZ/XuxdEoYR/o+ZQkuQ3xKAR7gUx/yzMfMpl9FfsAMdELd1S+ox8srUnS2U4Yxe40wTiEIaUbQMijEbkgTopwevVPqQ==
Sender: "Stable.cz zakaznicky ucet" <zakaznik@kocicka.stable.cz>

Podla mojho skromneho nazoru je jednoducho kocicka zle nastavena. Thats all.

Dakujem za informacie.

Upravil pirios (2022-11-03 01:22:26)


Program PLUS: www.piri.sk | www.dabingforum.sk | Na Endore od roku 2010 a nikde inde.

Offline

#2 2022-11-03 12:38:00

JF
Endora rádce
Místo: ....nice u Plzně
Registrován: 2010-06-22
Příspěvky: 11,876

Re: Problem s SPF na serveri kocicka.stable.cz

Dobrý den, ano, může být server jinak nastaven než ostatní servery čím může docházet k ignorování -f parametru čím vznikně vámi řešený problém. Proto doporučuji odesílat přes SMTP reálně založené schránky na vaši doméně.


Ján Fačkovec - Endora.cz by Webglobe
Email, Web, Webadmin, Webmail, Nápověda, Ceník

Offline

Zápatí

Založeno na FluxBB | CZ a SK