Correo electrónico - Tareas #5788 Fallos de reenvíos de correos desde el dominio litoralnorte a unorte 09/04/2017 03:40 PM - Andrés Pías Status: Resuelta Start date: 09/04/2017 Priority: Alta Due date: Assignee: Miguel Pertusatti % Done: 80% Category: Estimated time: 0.00 hour Target version: Spent time: 5.50 hours Description Anoto solicitud de Miguel: Hola Andrés: Te reenvío este correo que es el rebote que recibe "Guillermo Reisch" <[email protected]> cuando en vía un correo a "Mpertusatti" < [email protected]>; el correo lo recibo en <[email protected]> pero no es reenviado a < [email protected]>. Son casos que solo ocurren con remitentes de algunos servidores de correo. Saludos Miguel ----- Mensaje reenviado ----- De: "Guillermo Reisch" <[email protected]> Para: "Mpertusatti" [email protected]> Enviados: Lunes, 4 de Septiembre 2017 13:21:31 Asunto: Fwd: Undelivered Mail Returned to Sender -------- Original Message -------- Subject: Undelivered Mail Returned to Sender Date: Mon, 4 Sep 2017 13:18:17 0300 (UYT) From: [email protected](Mail Delivery System) To: --- @fenf.edu.uy This is the mail system at host godel.csic.edu.uy. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system [email protected]>: host dayman.unorte.edu.uy[164.73.212.3] said: 550 Your rcpt is not permitted (SPF - read spf.pobox.com) (in reply to RCPT TO command) 07/23/2020 1/8
8
Embed
Correo electrónico - Tareas #5788 - Software Libre › issues › 5788.pdf · Correo electrónico - Tareas #5788 Fallos de reenvíos de correos desde el dominio litoralnorte a unorte
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Correo electrónico - Tareas #5788
Fallos de reenvíos de correos desde el dominio litoralnorte a unorte
09/04/2017 03:40 PM - Andrés Pías
Status: Resuelta Start date: 09/04/2017
Priority: Alta Due date:
Assignee: Miguel Pertusatti % Done: 80%
Category: Estimated time: 0.00 hour
Target version: Spent time: 5.50 hours
Description
Anoto solicitud de Miguel:
Hola Andrés:
Te reenvío este correo que es el rebote que recibe "Guillermo Reisch" <[email protected]> cuando en vía un correo a "Mpertusatti" <
https://mxtoolbox.com/SuperTool.aspx?action=spf%3aunorte.edu.uy&run=toolpage#, entiendo que lo que pasó fue que como la IP del Servidor
MTA Emisor (godel.csic.edu.uy) no coincide con ninguna de las IP del registro SPF de Unorte, se debe estar generado un SoftFail.
Hay que mirar la información DNS del servidor que envía a Unorte, en este caso será el de Enfermeria o Godel?
Por lo que veo el que es más restrictivo es Enfermeria:
dig -t TXT fenf.edu.uy
fenf.edu.uy. 89 IN TXT "v=spf1 mx a:mail2.fenf.edu.uy a:mail3.fenf.edu.uy -all"
dig -t TXT litoralnorte.udelar.edu.uy
litoralnorte.udelar.edu.uy. 86400 IN TXT "v=spf1 mx a:russell.csic.edu.uy a:godel.csic.edu.uy a:dirac.csic.edu.uy ?all"
La config de Enrfemería será la que nos complica?
Quizá que por eso no se permite el reenvío de un mail dede cuenta @fenf.edu.uy sobre el server godel.csic.eduy que dado el SPF no está autorizado.
#7 - 09/13/2017 04:32 PM - Andrés Pías
Leyendo en las buenas prácticas de Forwarding de SPF vemos lo siguiente, que indica que el que termina por rechazar un correo es el MTA receptor:
Forwarding is only a problem for mail recipients who check SPF and do not make provisions for any forwarders they have set up.
...
Forwarders are generally set up by the mail recipient – and thus are the responsibility of the mail recipient.
Y en caso de que durante el forward del correo no se haga un sender-rewriting (re escritura del MAIL FROM:), el MTA receptor no debe rechazar el correo
basándose en el SPF:
When configuring a forwarder, all you need to know is whether the forwarder performs sender rewriting, e.g. SRS.
For non-sender-rewriting forwarders, accept all mail without checking SPF (any SPF results are meaningless). Hopefully, you (or your user) have
chosen a forwarder that checks SPF before forwarding. If your implementation allows it, also check SPF for a "pretend" MAIL FROM that your
forwarder could use (the original recipient RCPT at the forwarder before the email was forwarded). This verifies that the forwarded mail really came
from your trusted forwarder.
For sender-rewriting forwarders, do check SPF.
#8 - 10/30/2017 05:28 PM - Andrés Pías
- Status changed from En curso to Resuelta
- Assignee changed from Andrés Pías to Miguel Pertusatti
- % Done changed from 20 to 80
Luego de poner en la whilist de Dayman a Godel parece ser que no hubieron nuevos problemas.