RE: SPF and Google Groups (sending on behalf of)

John Kirkwood wrote on 7/18/2008 10:17:35 AM:

> user <at> un.org posts a message to the email list server
> geneva-web-group <at> googlegroups. Google Groups then sends a group email,
> marked From: user <at> un.org, but sent using a Google mailserver. The SPF
> record at un.org does not designate Google as a permitted sender. My
ISP
> blocks the email (dotster.com / mail3.dotsterhost.com - quite strict
on
> RFC and SPF imperfections, for example will <fail> on an invalid SPF
> record).
> 
>  Received-SPF: pass (googlegroups.com designates 209.85.146.244 as a
> trusted
> SMTP server)
>  Received-SPF: fail (un.org does not designate 209.85.146.244 as a
permitted
> sender)
> 
> Any ideas? (Full headers of sent mail below - with sender's name
changed -
> email retrieved from a Death2Spam mail relay server).

	My first thought is to ask why the recipient is apparently
testing the From header?  SPF doesn't protect that.  Sender ID tries to
protect that.  Looks to me like Google has it right and the ISP is
wrong.

http://www.openspf.org/FAQ/Envelope_from_scope

>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 
> 
> Date: Fri, 18 Jul 2008 02:49:21 -0700 (PDT)
> From: User <user <at> un.org>
> To: Geneva Web Group <geneva-web-group <at> googlegroups.com>
> Subject: Web development job - paid this time...
>  Return-Path: <grbounce-
> kig5qauaaaaznpbi2wszj0atqg4i62pa=jkirkwood=kclinfo.com <at> googlegroups.co
m>
> 
>  Received-SPF: pass (googlegroups.com designates 209.85.146.244 as a
> trusted
> SMTP server)
>  Received-SPF: fail (un.org does not designate 209.85.146.244 as a
permitted
> sender)

-----
SPF FAQ: http://www.openspf.org/FAQ
Common mistakes: http://www.openspf.org/FAQ/Common_mistakes

 - Steve Yates
 - ITS, Inc.
 - A leading authority is someone lucky who guessed right.

~ Taglines by Taglinator - www.srtware.com ~