View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001595 | Main CAcert Website | misc | public | 2026-11-06 22:57 | 2026-11-06 22:57 |
| Reporter | L10N | Assigned To | |||
| Priority | high | Severity | minor | Reproducibility | always |
| Status | new | Resolution | open | ||
| Platform | Main CAcert Website | OS | N/A | OS Version | stable |
| Product Version | 2015 Q3 | ||||
| Summary | 0001595: list server's domain, lists.cacert.org, is failing spf check | ||||
| Description | on an unrelated note, the list server's domain, lists.cacert.org, is failing the spf check because the spf record for lists.cacert.org does not include the new mail server's IP. and with dmarc set to reject, your message is not likely to have reached many. iprev=pass (emailout.cacert.org) smtp.remote-ip=75.119.151.141; spf=fail smtp.mailfrom=lists.cacert.org Received: from emailout.cacert.org ([75.119.151.141]:46590) (envelope-from <cacert-owner@lists.cacert.org>) $ dig TXT lists.cacert.org +short "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2::17 -all" $ dig TXT _dmarc.cacert.org +short "v=DMARC1;p=reject;rua=mailto:abuse@cacert.org" spf does not inherit from parent domain like dmarc does. | ||||
| Additional Information | sent by e-mail by Vlad Kilin <vkilin@vkilin.com> | ||||
| Tags | configuration, e-mail, list, list-server, mail, spf | ||||
| Reviewed by | |||||
| Test Instructions | |||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-11-06 22:57 | L10N | New Issue | |
| 2026-11-06 22:57 | L10N | Tag Attached: configuration | |
| 2026-11-06 22:57 | L10N | Tag Attached: e-mail | |
| 2026-11-06 22:57 | L10N | Tag Attached: list | |
| 2026-11-06 22:57 | L10N | Tag Attached: list-server | |
| 2026-11-06 22:57 | L10N | Tag Attached: mail | |
| 2026-11-06 22:57 | L10N | Tag Attached: spf |
