Hi guys
I get reports from customers sending their outgoing mail through smtp.swisscomdata.ch stating their mail is bounce due to SPF violation. It seems the IPs of the mailservers processing those messages have changed recently.
Is there anyone from Swisscom mailserver team who could provide me with a list of IP of outgoing SMTP servers used to relay mail sent to smtp.swisscomdata.ch? It appears that IP ranges 46.14.34.0/24 and 46.14.97.0/24 are involved. I'd like to update the SPF declarations for those customers...
Cheers
Jean-Pierre
Swisscom stopped the SPAM-Filtering for business light clients and told them to move to Virtualtec. The Virtualtec crew is making some changes in the MX-configurstoon together with Swisscom as far as I've heard yesterday from their CEO H. Widmer.
Floh On 31 Jan 2013 12:21, "Jean-Pierre Schwickerath" swinog@hilotec.net wrote:
Hi guys
I get reports from customers sending their outgoing mail through smtp.swisscomdata.ch stating their mail is bounce due to SPF violation. It seems the IPs of the mailservers processing those messages have changed recently.
Is there anyone from Swisscom mailserver team who could provide me with a list of IP of outgoing SMTP servers used to relay mail sent to smtp.swisscomdata.ch? It appears that IP ranges 46.14.34.0/24 and 46.14.97.0/24 are involved. I'd like to update the SPF declarations for those customers...
Cheers
Jean-Pierre
-- HILOTEC Engineering + Consulting AG - Langnau im Emmental Energietechnik und Datensysteme: Server, PCs, Linux, Telefonanlagen, VOIP, Hosting, Datenbanken, Entwicklung, Komplettlösungen für KMUs Tel: +41 34 402 74 00 - http://www.hilotec.com/
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
A clarification on my part on this subject, because there seems to be some confusion. Disclaimer: this is not an official statement from Swisscom.
Swisscom is phasing out mail services which were running on old former cybernet mail servers. This includes outbound mail ("smtp.cybernet.ch", "smtp.swisscomdata.ch") as well as inbound mail (mailbackup, spam filter services).
For outbound mail, a new mail cluster has been taken into service, and yes, this is running on new ip ranges. But these are in the same ball park as the long existing bluewin mail servers, _not_ 46.14.*.*, which are IP addresses assigned to customers. I'm not in charge of these servers, so unfortunately I can't give you the concrete IP addresses. Just shows once more, that SPF is broken by design.
Inbound services are separate, and customers of these have been informed individually.
Cheers, Markus
On 2013-01-31 12:59 , Markus Wild wrote: [..]
I'm not in charge of these servers, so unfortunately I can't give you the concrete IP addresses. Just shows once more, that SPF is broken by design.
SPF is broken in different ways, but this could have been done perfectly fine with SPF by using an include/redirect statement, see examples used by millions below (and note the cool 'netblocks6' ;).
Of course that would have meant that the original hoster (Swisscom in this case) published that information... maybe that is something to offer customers!? :)
Greets, Jeroen
--
$ dig +short google.com txt "v=spf1 include:_netblocks.google.com include:_netblocks6.google.com ip4:216.73.93.70/31 ip4:216.73.93.72/31 ~all"
$ dig +short gmail.com txt "v=spf1 redirect=_spf.google.com"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Jean-Pierre,
IP (FQDN) for new smtp.swisscomdata.ch and smtp.cybernet.ch
195.186.136.31 (zhhdzmsp-smtp12.bluewin.ch) 195.186.136.32 (zhhdzmsp-smtp14.bluewin.ch) 195.186.136.33 (zhhdzmsp-smtp16.bluewin.ch) 195.186.136.34 (zhhdzmsp-smtp18.bluewin.ch)
195.186.18.31 (zhbdzmsp-smtp11.bluewin.ch) 195.186.18.32 (zhbdzmsp-smtp13.bluewin.ch) 195.186.18.33 (zhbdzmsp-smtp15.bluewin.ch) 195.186.18.34 (zhbdzmsp-smtp17.bluewin.ch)
For more information read Markus Wilds response.
Regards, Tom On 01/31/13 12:14, Jean-Pierre Schwickerath wrote:
Hi guys
I get reports from customers sending their outgoing mail through smtp.swisscomdata.ch stating their mail is bounce due to SPF violation. It seems the IPs of the mailservers processing those messages have changed recently.
Is there anyone from Swisscom mailserver team who could provide me with a list of IP of outgoing SMTP servers used to relay mail sent to smtp.swisscomdata.ch? It appears that IP ranges 46.14.34.0/24 and 46.14.97.0/24 are involved. I'd like to update the SPF declarations for those customers...
Cheers
Jean-Pierre
-
Florian Mauchle -
Jean-Pierre Schwickerath -
Jeroen Massar -
Markus Wild -
Thomas Vogt