On Tuesday 2022-11-29 21:12, L A Walsh wrote:
Anyone else getting these bounces -- looks like a misconfiguration somewhere?
Remote Server returned ' 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' [and more of the mail]
The way I read it.. tlinx.org sent a mail to opensuse-factory. opensuse-factory sent it to (I think) ppapen@hotmail.de. ppapen has a Forwarding rule or something, which is why we see the Resent-From header. The new Envelope should have FROM=ppapen at hotmail, and RCPT=amdlnx60 at gmail. Because Microsoft does not implement SRS rewriting, Google uses the SPF data for @tlinx.org rather than the SPF data for @hotmail.de. The check fails and Google gives Microsoft the finger. Microsoft then generates a Non-Delivery Report, but rather than sending the NDR to the Envelope FROM (ppapen), it sends it to the inner From: line (tlinx), which is stupid.