Exchange Server Forums

Sender ID/SPF Problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> General >> Sender ID/SPF Problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Sender ID/SPF Problem - 6.Mar.2007 2:05:03 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

After much testing and deliberation, we decided to enabled Sender ID validation on our Exchange 2003 Standard Edition w/ SP2 server and set it to Reject messages that Fail the Sender ID check.
Our server is rejecting messages from someone whose domain has a valid SPF record and which is coming from a server that is authorized according to the SPF record.
The domain the message is being sent from is "mycingular.blackberry.net" and the sending servers are the regular Blackberry SMTP servers, all between 216.9.248.48 - 216.9.248.55.

The user's server is being returned a message from our server that states, "5.7.1 Sender ID (PRA) Not Permitted."

From all that I've read, this issue is due to one of two things:
1) The way that Sender ID validates SPF records (v=spf1) using the MAIL FROM *and* the PRA (spf2.0/mfrom,pra)
2) The issue with Exchange's Sender ID not working correctly with non-class full subnets, as described here: http://support.microsoft.com/default.aspx/kb/910272

Unfortunately, I don't know how to test either theory.
Is there a way to change the way that Exchange's Sender ID tests v=spf1 records to just test the MAIL FROM?
Or does anybody know if the fix described in the KB article is freely available?

I don't have access to the sender's device to see if it is specifying a different email address in the PRA (From: in the DATA message) than the MAIL FROM.

Sorry for the long-winded question. Any and all help is appreciated.
Thanks in advance.

-edited title-

< Message edited by aprior -- 21.Mar.2007 8:27:39 PM >

Post #: 1

Featured Links*

RE: Sender ID issue - 7.Mar.2007 7:23:35 AM

e_aravind

Posts: 118
Joined: 6.Mar.2005
From: India
Status: offline

Not sure if you have analyzed this:

How to configure Outlook 2003 to display the results of the Sender ID validation process if the mailbox server is running Exchange Server 2003 SP2
KB 917382

(in reply to aprior)

Post #: 2

RE: Sender ID issue - 7.Mar.2007 8:46:09 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

quote:

ORIGINAL: e_aravind
How to configure Outlook 2003 to display the results of the Sender ID validation process if the mailbox server is running Exchange Server 2003 SP2
KB 917382

Thanks for the response.
I couldn't find anything with that KB#, but I think I know what you're referring to, I do have the custom form created and the column shown to display the Sender ID results. It works great, and if I set the Exchange server to Accept messages that Fail validation, I do see that the result was Fail but what I don't understand is WHY it's failing.

In addition to my previous questions, is there a way to specify email address(es) that bypass the Sender ID check?

Thanks again

< Message edited by aprior -- 7.Mar.2007 9:14:22 PM >

(in reply to e_aravind)

Post #: 3

RE: Sender ID issue - 15.Mar.2007 11:41:59 AM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

*bump*
Hopefully now that everyone has their DST questions out of the way, someone will see this.
It would really be great if I could find a way to let certain senders bypass the Sender ID check.
If this is the wrong area for this question, please move it or let me know and I will post in a different section.

Please help :(
Thanks again.

(in reply to aprior)

Post #: 4

RE: Sender ID issue - 21.Mar.2007 8:26:41 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

Anybody have any ideas?
If not, just reply saying, "No," just so I know you care.

(in reply to aprior)

Post #: 5

RE: Sender ID issue - 28.Mar.2007 2:50:33 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

another bump
There has to be some way to bypass the Sender ID check for certain senders, or even whole domains... just can't seem to find a way.
Anybody know?

(in reply to aprior)

Post #: 6

RE: Sender ID issue - 15.Oct.2007 9:59:02 AM

HGBlob

Posts: 6
Joined: 9.Oct.2007
Status: offline

same issue here.

We are dead in the water regarding Exchange, SPF, and Blackberry.
There is definately a bug in Exchange 2003 regarding SenderID handling.

I've seen a lot of talk on the issue, and not one fix. Sadly, we have to choose between enabling SPF, and using Blackberries.

(in reply to aprior)

Post #: 7

RE: Sender ID issue - 15.Oct.2007 8:33:41 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

Did you try the Hotfix in http://support.microsoft.com/default.aspx/kb/910272?
I applied it, but was not able to get the person with whom we were experiencing this issue to email me back after applying it. I haven't seen this issue with anyone else since applying the hotfix, but lack of evidence doesn't equal evidence to the contrary.

If you do apply it, let me know if it works for you.

(in reply to HGBlob)

Post #: 8

RE: Sender ID issue - 16.Oct.2007 11:03:34 AM

HGBlob

Posts: 6
Joined: 9.Oct.2007
Status: offline

oh my gosh! I can't believe someone responded!

I'm contacting MS right now for that hotfix. I will let you know if it works or not, I promise.

Either way, thanks for helping.

(in reply to aprior)

Post #: 9

RE: Sender ID issue - 16.Oct.2007 2:35:56 PM

HGBlob

Posts: 6
Joined: 9.Oct.2007
Status: offline

It works!

I just sent a successful test message with SPF, from my Blackberry.

Thanks a lot.

(in reply to HGBlob)

Post #: 10

RE: Sender ID issue - 16.Oct.2007 10:58:12 PM

aprior

Posts: 14
Joined: 6.Mar.2007
Status: offline

Thank you very much for the reply, I can rest a little easier now.

Glad it worked, take care.

< Message edited by aprior -- 16.Oct.2007 10:59:32 PM >

(in reply to HGBlob)

Post #: 11