Comprehensive data protection for all workloads
Post Reply
Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

SPF fail for Veeam emails

Post by Titanmike » Nov 29, 2010 10:43 am

Not sure where to post this, but emails received from Veeam always end up in our spam folder.

Which doesn't surprise me :)

Your SPF record is

Code: Select all

> set q=txt
> veeam.com
Server:  artemis.titaninternet.co.uk
Address:  85.232.32.10

Non-authoritative answer:
veeam.com       text =

        "v=spf1 include:aspmx.pardot.com include:mktomail.com mx ~all"

veeam.com       nameserver = dns1.amustsoftware.com
veeam.com       nameserver = dns2.amustsoftware.com
Your mail seems to come from amust.local

Code: Select all

exchprod.amust.local
Some are received from www.veeam.com (i.e. password reset)

Code: Select all

"<de92630f231ec35523cacc7105b269e1@www.veeam.com>"
though, which is why your mails end up in spam as SPF forged and fail spam checks as a result :)

Just saying :) :)

Gostev
SVP, Product Management
Posts: 24789
Liked: 3523 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: SPF fail for Veeam emails

Post by Gostev » Nov 29, 2010 11:56 am

Hi Mike, thanks for posting and bringing our attention to this, I will let our web team know.

Gostev
SVP, Product Management
Posts: 24789
Liked: 3523 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: SPF fail for Veeam emails

Post by Gostev » Dec 01, 2010 6:56 pm

Titanmike wrote: Your mail seems to come from amust.local

Code: Select all

exchprod.amust.local
Hi, we have been working on addressing all bullets above, but can you please confirm this one? This can indeed be logged as some intermediary point, but eventually all mail should appear to be coming out of our org from mail.veeam.com, or mail2.veeam.com. Thank you for your help!

Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

Re: SPF fail for Veeam emails

Post by Titanmike » Dec 01, 2010 8:39 pm

Gostev wrote: Hi Mike, we have been working on addressing all bullets above, but can you please confirm this one? This can indeed be logged as some intermediary point, but eventually all mail should appear to be coming out of our org from mail.veeam.com, or mail2.veeam.com. Thank you for your help!
It seems to come from exchprod.amust.local when an employee sends an email.

For example

Code: Select all

"11/15/10 10:33:03","Sender Policy Framework","warren.olivier@veeam.com","michaelxxx@xxx.co.uk","RE: Recovery Verification","Move to Exchange Folder","Sender is probably forged (SPF Softfail)","<EC0B7A55F7737647A582AE96C6A3B07C0385734B@exchprod.amust.local>"

Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

Re: SPF fail for Veeam emails

Post by Titanmike » Dec 01, 2010 8:42 pm

By the way, if mail will eventually come from mail.veeam.com, then don't forget to change the SPF record in DNS accordingly :)

Gostev
SVP, Product Management
Posts: 24789
Liked: 3523 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: SPF fail for Veeam emails

Post by Gostev » Dec 01, 2010 9:05 pm

Thank a lot! Yes, I hear we should be able to remove SPF in a couple of weeks.

Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

Re: SPF fail for Veeam emails

Post by Titanmike » Dec 01, 2010 9:09 pm

Gostev wrote:Thank a lot! Yes, I hear we should be able to remove SPF in a couple of weeks.
Remove SPF ? That makes matters rather worse :)

Better just fix instead of remove :)

Gostev
SVP, Product Management
Posts: 24789
Liked: 3523 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: SPF fail for Veeam emails

Post by Gostev » Dec 01, 2010 9:19 pm

Yes, this is what I meant - remove the one from pardot.

Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

Re: SPF fail for Veeam emails

Post by Titanmike » Dec 11, 2010 10:21 am

You certainly made a change, but it still doesn't match and as a result you guys keep "spamming" :)

Mails are now coming from products.veeam.com

Code: Select all

Received: from localhost ([127.0.0.1] helo=products.veeam.com)by products.veeam.com with esmtp
But the SPF has been changed to mail.veeam.com and mail2.veeam.com

Code: Select all

> set q=mx
> veeam.com
Server:  artemis.titaninternet.co.uk
Address:  85.232.32.10

Non-authoritative answer:
veeam.com       MX preference = 5, mail exchanger = mail2.veeam.com
veeam.com       MX preference = 10, mail exchanger = mail.veeam.com
No match = considered spoof :)

Gostev
SVP, Product Management
Posts: 24789
Liked: 3523 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: SPF fail for Veeam emails

Post by Gostev » Dec 14, 2010 1:27 pm

Should be matching right now, hopefully.

Titanmike
Enthusiast
Posts: 65
Liked: never
Joined: Apr 16, 2010 1:52 pm
Full Name: ZeGerman
Contact:

Re: SPF fail for Veeam emails

Post by Titanmike » Dec 14, 2010 3:31 pm

Gostev wrote:Should be matching right now, hopefully.
The current mail notification still shows something different - but it probably takes a while to propagate, plus it didn't end up in spam so it seems fine :D

Post Reply

Who is online

Users browsing this forum: Bing [Bot], ober72 and 20 guests