SPF check failed

HI Guys,

I am having an issue with #550 5.7.1 Rejected - SPF check failed ##

They client is running exchange 2007 and outlook 2007

I have recently changed this client from one ISP to another so updated the static IP address.

Any ideas?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You would need to check in whomever is hosting your DNS, there should be an spf or txt record there that you need to modify.  Remove the old IP address and update with the new.
you will need to update the SPF record in the DNS for the domain with the new ip
it may be a SRV or TXT record
Seth SimmonsSr. Systems AdministratorCommented:
SPF entries in DNS are txt records that you need to change

this explains more on what it is and the syntax; just change the old public IP in that txt record to the new address


Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

You may also want to edit the end to be ~all so it soft fails rather than stops mail altogether.
You may not for security reasons, but just so you know the option is there if you want to.
AlwayslearningmoreAuthor Commented:
Thanks I am just locked out of the domain atm. Awaiting a password reset is there a way I can check these details as a member of the public like checking MX records on mxtoolbox.

Seth SimmonsSr. Systems AdministratorCommented:
from mxtoolbox, select more on the top right and put your domain in the spf box

you can also use nslookup
just run nslookup from a command prompt then put set type=txt
then type your domain name
it will show any txt records that exist
AlwayslearningmoreAuthor Commented:
I am getting the following

Prefix      Type      Value      PrefixDesc      Description
+      mx            Pass      Match if IP is one of the MX hosts for given domain name
-      all            Fail      Always matches. It goes at the end of your record.
AlwayslearningmoreAuthor Commented:
On the TXT query i get

Type      Domain Name      TTL      Record
TXT      mydomain.com.au      4 hrs      v=spf1 mx -all
Seth SimmonsSr. Systems AdministratorCommented:
that means whatever server is defined in your MX record will pass spf check
is your exchange server sending out with the same public IP it receives from?
if it's different then that would cause this to happen

if that's the case, you can either change your exchange server to send out using the same public address (probably be at your firewall) or just modify that TXT record adding the public IP address it sends out as on that line so it would look more like v=spf1 ip4: mx -all (just replace with the real public address)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AlwayslearningmoreAuthor Commented:
The receiving IP address is from Mailroute.info

and the outgoing IP address,  is static from the ISP
Seth SimmonsSr. Systems AdministratorCommented:
ahh that makes sense since your MX record points elsewhere
then just add the public address of your exchange server in that TXT record
AlwayslearningmoreAuthor Commented:
Thanks I have updated the record as per your advice.

I will give feedback shortly,.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.