[LINK] Now that's secure - I guess

[Scott Howard]

On Fri, Mar 30, 2012 at 6:22 PM, David Boxall <
david.boxall at hunterlink.net.au> wrote:

> However, the domain hunterlink.net.au has declared using SPF that it
> does not send mail through mp3.skymesh.com.au (180.181.128.93). That is
> why the message was rejected.
>

Wow...  that's insane.

The SPF record for the hunterlink.net.au domain is only allowing mail from
their (ie, Pacific Internet, who bought HunterLink years ago) mail servers,
with a hard fail for any other hosts :

hunterlink.net.au.      900     IN      TXT     "v=spf1 ip4:61.8.2.80/29 a:
mailout2-1.pacific.net.au/29 a:mailout2-9.pacific.net.au/29 a:
mailout1-1.pacific.net.au/29 a:mailout1-9.pacific.net.au/29 a:
mailout2.pacific.net.au a:mailout1.pacific.net.au mx -all"

This type of configuration makes sense for a corporate environment where
mail flow is controlled, but makes zero sense for an ISP mail domain where
users could be sending via any number of servers outside of the "correct"
servers.

I'd suggest contacting Pacific Internet and try to convince them how broken
this setup is. Good lucky, I suspect you're going to need it...

 Scott
  (Who used to run the hunterlink.net.au mail servers many, many years ago!)