On 2022-11-30 00:04, Jan Engelhardt wrote:
On Tuesday 2022-11-29 21:12, L A Walsh wrote:
Anyone else getting these bounces -- looks like a misconfiguration somewhere?
Remote Server returned ' 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both 550-5.7.26 do not pass). SPF check for [tlinx.org] does not pass with ip: 550-5.7.26 [2a01:111:f400:7e0e::200].To best protect our users from spam, the 550-5.7.26 message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. z12-20020a056402274c00b0046afd9f07b0si8389199edd.14 - gsmtp' [and more of the mail]
The way I read it..
tlinx.org sent a mail to opensuse-factory.
opensuse-factory sent it to (I think) ppapen@hotmail.de.
ppapen has a Forwarding rule or something, which is why we see the Resent-From header. The new Envelope should have FROM=ppapen at hotmail, and RCPT=amdlnx60 at gmail.
Because Microsoft does not implement SRS rewriting, Google uses the SPF data for @tlinx.org rather than the SPF data for @hotmail.de. The check fails and Google gives Microsoft the finger.
Microsoft then generates a Non-Delivery Report, but rather than sending the NDR to the Envelope FROM (ppapen), it sends it to the inner From: line (tlinx), which is stupid.
Trust M$ to do stupid things with email :-( -- Cheers / Saludos, Carlos E. R. (from 15.4 x86_64 at Telcontar)