28 Aug
2023
28 Aug
'23
4:35 a.m.
Hi All,
I am trying, and failing, to set up postfix and google is not playing nice.
The domain name of my server is ianhobson.com
The message I sent is
echo "This is the message body" | mail -s "Hello world 7"
hobson42(a)google.com
The txt record for ianhobson.com contains the entry:
v=spf1 ip4:85.119.83.63 ip6:2001:ba8:1f1:f159::2 include:_spf.google.com
-all
My message bounced ...
--000000000000779e540603f583f0
Content-Type: message/rfc822
X-Google-Smtp-Source:
AGHT+IEp9prm+RYt9RU4zCwTQ3RtchA2FcY6YsplVKwCVE6xm4NDC8r9xgRVISiZKbp+XA0ARsLc
X-Received: by 2002:a05:600c:b42:b0:3fe:1fd9:bedf with SMTP id
k2-20020a05600c0b4200b003fe1fd9bedfmr19347254wmr.11.1693202867117;
Sun, 27 Aug 2023 23:07:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1693202867; cv=none;
d=google.com; s=arc-20160816;
b=B1rJ+GcvNSZSWuXvkd0eJmcKuTh3u5xYoevSMwGo9AYZiBFw7zxRTp1TyUDCytUxPj
X88FC/M2i02OY3hbpWZovRTvfTt7qDr9foar4MejQ2AUaoNPSCzGhw4mh3N8L6jpYOAZ
Bwp2+1Uu0cOJEAxkcolV5vpepJNLyviWo+tugpPQ1VoOVkbnnYkc1e3W62jJZkUyQmW4
dyKhs261pJxj3t+mRaXCuu0KCpubpUFut3MTCCrc+YDqWoe1l3Iqmdq3vUctAF5zCyZx
q9Hm5KaLnL8ByBD06KGMExVYrrl1KSPkduHP4eO5b3Wf5onH6BoqcA9RVG1NDCvj572J
X1BA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
h=from:date:message-id:to:subject;
bh=xAjO0M9TPUb7cMQCtftlB6qyGZ///K1cOTl9KtbIS7o=;
fh=GAhnp/c7C3JdQ2Hhj44GY0EPYm7p/BemqzOophPSH38=;
b=z29ZintE4XH0/vzj1A2PMoWhUCMlbKIYVh/919smU+pbaTWrxezz+MDno71mRW2pzn
RL/q7mS3GNHVcAp8VadqeAomBQetQ9fexWmClyBhynFNma5JYRnxZFqzNBpDtKnQBO5f
34tk7vXrVRhC7gobov93uvJ0n2A8BaDcL7FMqthLdizMW7UuzcMNV01gnPw1S0e4Ru1b
jBtDeToW5GPdAPBeYM63ndMgxelMIQr5DZhhsf6dMdjN+qefkmXG0FSRCXTkxAeE0ImL
ulduc7GYoL1nCQ1O5Q/0U8+L4mB+oJXiHeWRFY9zyO67WWXImeZJ/kwPF6Esc/3prF+a
hOig==
ARC-Authentication-Results: i=1; mx.google.com;
spf=fail (google.com: domain of ian(a)ianhobson.com does not
designate 2001:ba8:1f1:f159::2 as permitted sender)
smtp.mailfrom=ian(a)ianhobson.com
Return-Path: <ian(a)ianhobson.com>
Received: from ianhobson.com
(2001-ba8-1f1-f159-0-0-0-2.autov6rev.bitfolk.space. [2001:ba8:1f1:f159::2])
by mx.google.com with ESMTPS id
n27-20020a05600c181b00b003fee7bfd47dsi5015614wmp.74.2023.08.27.23.07.47
for <hobson42(a)google.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Sun, 27 Aug 2023 23:07:47 -0700 (PDT)
Received-SPF: fail (google.com: domain of ian(a)ianhobson.com does not
designate 2001:ba8:1f1:f159::2 as permitted sender)
client-ip=2001:ba8:1f1:f159::2;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of ian(a)ianhobson.com does not
designate 2001:ba8:1f1:f159::2 as permitted sender)
smtp.mailfrom=ian(a)ianhobson.com
Received: by ianhobson.com (Postfix, from userid 1000)
id DA2F7C00C5; Mon, 28 Aug 2023 07:07:46 +0100 (BST)
Subject: Hello world 7
To: <hobson42(a)google.com>
X-Mailer: mail (GNU Mailutils 3.7)
Message-Id: <20230828060746.DA2F7C00C5(a)ianhobson.com>
Date: Mon, 28 Aug 2023 07:07:46 +0100 (BST)
From: Ian Hobson <ian(a)ianhobson.com>
This is the message body
--000000000000779e540603f583f0--
The proofpoint check
https://www.proofpoint.com/us/cybersecurity-tools/dmarc-spf-creation-wizard…
confirms the data.
What is going wrong?
Thanks
Ian
--
Ian Hobson
Tel (+66) 626 544 695
28 Aug
28 Aug
4:56 a.m.
On 28/08/2023 13:24, John Winters via BitFolk Users wrote:
On 28/08/2023 05:35, Ian Hobson via BitFolk Users
wrote:
It had 1 hour TTL, and I think I took 50 minutes before I sent that
message through.
Will wait a full hour after the latest -/~ change and try again.
Regards
Ian
--
Ian Hobson
Tel (+66) 626 544 695
Hi All,
I am trying, and failing, to set up postfix and google is not playing
nice.
[snip]
The txt record for ianhobson.com contains the
entry:
v=spf1 ip4:85.119.83.63 ip6:2001:ba8:1f1:f159::2
include:_spf.google.com -all
Just a thought - if you change the -all to ~all then Google should
accept the message and you can view it Gmail and look at the "View
original" option where you might get more information about Google's
reasoning.
It's not just that an older version of the TXT record hasn't timed out
yet is it?
5:23 a.m.
@andy
Does this matter?
ian@callisto:~$ host 2001:ba8:1f1:f159::2
2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.9.5.1.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa
domain name pointer 2001-ba8-1f1-f159-0-0-0-2.autov6rev.bitfolk.space.
ian@callisto:~$ host 85.119.83.64
64.83.119.85.in-addr.arpa domain name pointer ianhobson.com.
Also picked up that the IP4 address was wrong. 3pm before next test.
Regards
IAn
On 28/08/2023 13:24, John Winters via BitFolk Users wrote:
On 28/08/2023 05:35, Ian Hobson via BitFolk Users
wrote:
--
Ian Hobson
Tel (+66) 626 544 695
Hi All,
I am trying, and failing, to set up postfix and google is not playing
nice.
[snip]
The txt record for ianhobson.com contains the
entry:
v=spf1 ip4:85.119.83.64 ip6:2001:ba8:1f1:f159::2
include:_spf.google.com -all
Just a thought - if you change the -all to ~all then Google should
accept the message and you can view it Gmail and look at the "View
original" option where you might get more information about Google's
reasoning.
It's not just that an older version of the TXT record hasn't timed out
yet is it?
John
5:36 a.m.
Hmm.
Just received a message from fail2ban, that was accepted by google from
the IP6 address. It appears we might be nearly there.
Regards
Ian
On 28/08/2023 13:24, John Winters via BitFolk Users wrote:
On 28/08/2023 05:35, Ian Hobson via BitFolk Users
wrote:
--
Ian Hobson
Tel (+66) 626 544 695
Hi All,
I am trying, and failing, to set up postfix and google is not playing
nice.
[snip]
The txt record for ianhobson.com contains the
entry:
v=spf1 ip4:85.119.83.63 ip6:2001:ba8:1f1:f159::2
include:_spf.google.com -all
Just a thought - if you change the -all to ~all then Google should
accept the message and you can view it Gmail and look at the "View
original" option where you might get more information about Google's
reasoning.
It's not just that an older version of the TXT record hasn't timed out
yet is it?
John
6:19 a.m.
Hi Mike,
I included it, because of my understanding of Google's docs, which may
well be wrong.
Regards
Ian
On 28/08/2023 14:37, Mike Zanker via BitFolk Users wrote:
On 28/08/2023 06:36, Ian Hobson via BitFolk Users
wrote:
--
Ian Hobson
Tel (+66) 626 544 695
Just received a message from fail2ban, that was
accepted by google
from the IP6 address. It appears we might be nearly there.
Just wondering why you've included "include:_spf.google.com" in your SPF
record. Are you intending to send mail *from* your Gmail account using
your ianhobson.com domain name?
Cheers,
Mike
_______________________________________________
BitFolk Users mailing list <users(a)mailman.bitfolk.com>
You're subscribed as <hobson42(a)gmail.com>
Unsubscribe:
<https://mailman.bitfolk.com/mailman/postorius/lists/users.mailman.bitfolk.com/>
or send an email to <users-leave(a)mailman.bitfolk.com> 
6:24 a.m.
On 28/08/2023 05:35, Ian Hobson via BitFolk Users wrote:
Hi All,
I am trying, and failing, to set up postfix and google is not playing nice.
[snip]
The txt record for ianhobson.com contains the entry:
v=spf1 ip4:85.119.83.63 ip6:2001:ba8:1f1:f159::2 include:_spf.google.com
-all
Just a thought - if you change the -all to ~all then Google should
accept the message and you can view it Gmail and look at the "View
original" option where you might get more information about Google's
reasoning.
It's not just that an older version of the TXT record hasn't timed out
yet is it?
John
--
Xronos Scheduler - https://xronos.uk/ | i = (free(NULL), i++);
All your school's schedule information in one place.
Timetable, activities, homework, public events - the lot
Live demo at https://schedulerdemo.xronos.uk/
6:34 a.m.
Update. Partial success.
The spf passes, but the email still bounces :(
The bounce reads:
--000000000000df38f30603f72797
Content-Type: message/rfc822
X-Google-Smtp-Source:
AGHT+IFJ2enwreiVCbsTIZwelFtaC7uj1yPZ6v9I+C838/LdssIImGTrcsFJfoHb1ub/M+TwB1rp
X-Received: by 2002:a5d:4911:0:b0:314:1f6:2c24 with SMTP id
x17-20020a5d4911000000b0031401f62c24mr18442807wrq.36.1693209920086;
Mon, 28 Aug 2023 01:05:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1693209920; cv=none;
d=google.com; s=arc-20160816;
b=zC6TM2FzfqknmqjfM5GPcbGWbf8nlpAbxzENV2/+ZJA8q4OLzoMirZY91skgrwXDzJ
yvLsdSxA5Myeay+xkXssfk1w2qxk59T+E82CT75mQRoz+IMV3zprDtMu6yRURTr6sviG
WuebgqxbRnMjr27AWKUZjIswrjNmJRIhhe29neA+V9oPXGBM/89fhxnqFTCm1jqZhszL
ZP1HoQslKhvwwQRNw0FDtchawvSqqUEHbX2+WoFLCCZmJrm6F2+wOziiiUaLgBibI9y/
gltH2KyDyUlU/E3GndRgZYEfAVoiOXb496qZJ1hHA4mMyTGxV2bge+PvwWcj66Axk4eX
raAA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
h=from:date:message-id:to:subject;
bh=v0KqFRjytp24EitjUGqTefPU/nwMuNugaQ+egemK7gI=;
fh=GAhnp/c7C3JdQ2Hhj44GY0EPYm7p/BemqzOophPSH38=;
b=agYwrKtHFBgdzfOIuRt+qH3HQXFrKr66dpt++A/r33uXCUFGY17A9lJxFfRuahTF/q
E5nlAdPzX8rExsm8vBmwJ+DuZiRL3CGwpRC37cNRiz7wyrWfBlR0rJwQ3utwnj4r4FMa
i/P8+rQf7By5iMTOv9aj2CusY7Nt/bYlhbVtQGqyy7yQ+FDuVZdcy5pQgiZMIvgK6BGH
dqNe8FwbaR6BcSGRCSOAMnwL9tBePOInENC+Dt3r4fzaQotiFowWBfbV2n1nTio4s5qF
iba7qrnK6I7Kw9ixKTYPR+Re34ksJBSanUYKomlojbEIcZsgOrPn6F/OfQnA6ZKe00Ks
Ddog==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) smtp.mailfrom=ian(a)ianhobson.com
Return-Path: <ian(a)ianhobson.com>
Received: from ianhobson.com (ianhobson.com. [85.119.83.64])
by mx.google.com with ESMTPS id
e11-20020adffc4b000000b0031c4f802a3dsi3168826wrs.917.2023.08.28.01.05.19
for <hobson42(a)google.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 28 Aug 2023 01:05:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) client-ip=85.119.83.64;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) smtp.mailfrom=ian(a)ianhobson.com
Received: by ianhobson.com (Postfix, from userid 1000)
id D6456C027D; Mon, 28 Aug 2023 09:05:19 +0100 (BST)
Subject: Hello world 9
To: <hobson42(a)google.com>
X-Mailer: mail (GNU Mailutils 3.7)
Message-Id: <20230828080519.D6456C027D(a)ianhobson.com>
Date: Mon, 28 Aug 2023 09:05:19 +0100 (BST)
From: Ian Hobson <ian(a)ianhobson.com>
Message body
--000000000000df38f30603f72797--
I can't see why it bounced. Anybody?
Regards
Ian
On 28/08/2023 14:37, Mike Zanker via BitFolk Users wrote:
On 28/08/2023 06:36, Ian Hobson via BitFolk Users
wrote:
--
Ian Hobson
Tel (+66) 626 544 695
Just received a message from fail2ban, that was
accepted by google
from the IP6 address. It appears we might be nearly there.
Just wondering why you've included "include:_spf.google.com" in your SPF
record. Are you intending to send mail *from* your Gmail account using
your ianhobson.com domain name?
Cheers,
Mike
_______________________________________________
BitFolk Users mailing list <users(a)mailman.bitfolk.com>
You're subscribed as <hobson42(a)gmail.com>
Unsubscribe:
<https://mailman.bitfolk.com/mailman/postorius/lists/users.mailman.bitfolk.com/>
or send an email to <users-leave(a)mailman.bitfolk.com> 
7:37 a.m.
On 28/08/2023 06:36, Ian Hobson via BitFolk Users wrote:
Just received a message from fail2ban, that was
accepted by google from
the IP6 address. It appears we might be nearly there.
Just wondering why you've included "include:_spf.google.com" in your SPF
record. Are you intending to send mail *from* your Gmail account using
your ianhobson.com domain name?
Cheers,
Mike
8:20 a.m.
On 28/08/2023 07:34, Ian Hobson via BitFolk Users wrote:
Update. Partial success.
The spf passes, but the email still bounces :(
I can't see why it bounced. Anybody?
There should also be a reason why it bounced included in their email,
usually quoting the SMTP-level output.
Cheers,
Mike
8:26 a.m.
On 28/08/2023 07:19, Ian Hobson via BitFolk Users wrote:
I included it, because of my understanding of
Google's docs, which may
well be wrong.
Ah, OK :)
No, it's not needed. Your SPF record tells recipients which IP addresses
your mail will be sent *from*. In fact, you could simply have
"v=spf1 a -all"
which would cover the IPv4 and IPv6 addresses associated with
"ianhobson.com" (assuming that that's the only server sending such emails).
Cheers,
Mike
8:29 a.m.
Do you really have an account called "hobson42(a)google.com"
??
-----Original Message-----
From: Ian Hobson via BitFolk Users <users(a)mailman.bitfolk.com>
Sent: 28 August 2023 07:34
To: users(a)mailman.bitfolk.com
Cc: Ian Hobson <hobson42(a)gmail.com>
Subject: [bitfolk] Re: spf help needed
Update. Partial success.
The spf passes, but the email still bounces :(
The bounce reads:
--000000000000df38f30603f72797
Content-Type: message/rfc822
X-Google-Smtp-Source:
AGHT+IFJ2enwreiVCbsTIZwelFtaC7uj1yPZ6v9I+C838/LdssIImGTrcsFJfoHb1ub/M+T
wB1rp
X-Received: by 2002:a5d:4911:0:b0:314:1f6:2c24 with SMTP id
x17-20020a5d4911000000b0031401f62c24mr18442807wrq.36.1693209920086;
Mon, 28 Aug 2023 01:05:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1693209920; cv=none;
d=google.com; s=arc-20160816;
b=zC6TM2FzfqknmqjfM5GPcbGWbf8nlpAbxzENV2/+ZJA8q4OLzoMirZY91skgrwXDzJ
yvLsdSxA5Myeay+xkXssfk1w2qxk59T+E82CT75mQRoz+IMV3zprDtMu6yRURTr6sviG
WuebgqxbRnMjr27AWKUZjIswrjNmJRIhhe29neA+V9oPXGBM/89fhxnqFTCm1jqZhszL
ZP1HoQslKhvwwQRNw0FDtchawvSqqUEHbX2+WoFLCCZmJrm6F2+wOziiiUaLgBibI9y/
gltH2KyDyUlU/E3GndRgZYEfAVoiOXb496qZJ1hHA4mMyTGxV2bge+PvwWcj66Axk4eX
raAA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
h=from:date:message-id:to:subject;
bh=v0KqFRjytp24EitjUGqTefPU/nwMuNugaQ+egemK7gI=;
fh=GAhnp/c7C3JdQ2Hhj44GY0EPYm7p/BemqzOophPSH38=;
b=agYwrKtHFBgdzfOIuRt+qH3HQXFrKr66dpt++A/r33uXCUFGY17A9lJxFfRuahTF/q
E5nlAdPzX8rExsm8vBmwJ+DuZiRL3CGwpRC37cNRiz7wyrWfBlR0rJwQ3utwnj4r4FMa
i/P8+rQf7By5iMTOv9aj2CusY7Nt/bYlhbVtQGqyy7yQ+FDuVZdcy5pQgiZMIvgK6BGH
dqNe8FwbaR6BcSGRCSOAMnwL9tBePOInENC+Dt3r4fzaQotiFowWBfbV2n1nTio4s5qF
iba7qrnK6I7Kw9ixKTYPR+Re34ksJBSanUYKomlojbEIcZsgOrPn6F/OfQnA6ZKe00Ks
Ddog==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) smtp.mailfrom=ian(a)ianhobson.com
Return-Path: <ian(a)ianhobson.com>
Received: from ianhobson.com (ianhobson.com. [85.119.83.64])
by mx.google.com with ESMTPS id
e11-
20020adffc4b000000b0031c4f802a3dsi3168826wrs.917.2023.08.28.01.05.19
for <hobson42(a)google.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 28 Aug 2023 01:05:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) client-ip=85.119.83.64;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of ian(a)ianhobson.com designates
85.119.83.64 as permitted sender) smtp.mailfrom=ian(a)ianhobson.com
Received: by ianhobson.com (Postfix, from userid 1000)
id D6456C027D; Mon, 28 Aug 2023 09:05:19 +0100 (BST)
Subject: Hello world 9
To: <hobson42(a)google.com>
X-Mailer: mail (GNU Mailutils 3.7)
Message-Id: <20230828080519.D6456C027D(a)ianhobson.com>
Date: Mon, 28 Aug 2023 09:05:19 +0100 (BST)
From: Ian Hobson <ian(a)ianhobson.com>
Message body
--000000000000df38f30603f72797--
I can't see why it bounced. Anybody?
Regards
Ian
On 28/08/2023 14:37, Mike Zanker via BitFolk Users wrote:
On 28/08/2023 06:36, Ian Hobson via BitFolk Users
wrote:
SPF
Just received a message from fail2ban, that was
accepted by google
from the IP6 address. It appears we might be nearly there.
Just wondering why you've included "include:_spf.google.com" in your record. Are you intending to send mail *from*
your Gmail account
using
your ianhobson.com domain name?
Cheers,
Mike
_______________________________________________
BitFolk Users mailing list <users(a)mailman.bitfolk.com>
You're subscribed as <hobson42(a)gmail.com>
Unsubscribe:
<https://mailman.bitfolk.com/mailman/postorius/lists/users.mailman.bitf
olk.com/>
or send an email to
<users-leave(a)mailman.bitfolk.com>
--
Ian Hobson
Tel (+66) 626 544 695
_______________________________________________
BitFolk Users mailing list <users(a)mailman.bitfolk.com>
You're subscribed as <hugh(a)vcsnet.co.uk>
Unsubscribe:
<https://mailman.bitfolk.com/mailman/postorius/lists/users.mailman.bitf
olk.com/>
or send an email to <users-leave(a)mailman.bitfolk.com> 
9:50 p.m.
Hi Ian,
On Mon, Aug 28, 2023 at 12:23:15PM +0700, Ian Hobson via BitFolk Users wrote:
Does this matter?
ian@callisto:~$ host 2001:ba8:1f1:f159::2
2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.9.5.1.f.1.f.1.0.8.a.b.0.1.0.0.2.ip6.arpa
domain name pointer 2001-ba8-1f1-f159-0-0-0-2.autov6rev.bitfolk.space.
It's not great that you don't have proper reverse DNS, but it does
match forwards and backwards so it shouldn't cause too much of a
problem. One thing at a time…
ian@callisto:~$ host 85.119.83.64
64.83.119.85.in-addr.arpa domain name pointer ianhobson.com.
It doesn't matter except aesthetically that the IPv6 one doesn't
match the IPv4 one, since only one of them can be in use at a time
(a connection is either from a v6 or a v4 address) - it just has to
match itself. WHich yours do.
Also picked up that the IP4 address was wrong. 3pm
before next test.
You could set the TTL for the TXT record to be really low while you
are testing things.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
30 Aug
30 Aug
1:25 p.m.
Hi All,
A big thank-you to John, Mike, Hugh and Andy for your help.
Mail is now being handled properly again. I have no more reports of
strange bounces:)
Regards
Ian
--
Ian Hobson
Tel (+66) 626 544 695
259
days inactive
261
days old
12 comments
5 participants
participants (5)
-
Andy Smith -
hugh＠vcsnet.co.uk -
Ian Hobson -
John Winters -
Mike Zanker