Hi,
I think Exchange SPF control doesn't work correctly, for instance when I get an email from twitter to my Exchange(on-premise) mailbox it marks as SPF fail but the same email pass the SPF control of Hotmail, Gmail or Office 365.
Exchange mail header:
From: Twitter <n-fz=geraqlby.pbz-caabf@postmaster.twitter.com>
Return-Path: za9d488917fz=geraqlby.pbz@bounce.twitter.com
Received-SPF: Fail (exchange.domain.com: domain of
n-fz=geraqlby.pbz-caabf@postmaster.twitter.com does not designate
199.59.150.82 as permitted sender) receiver=exchange.domain.com;
client-ip=199.59.150.82; helo=spruce-goose-am.twitter.com;
Gmail:
Return-Path: <z00cb00917uu=uhfrlvahany.arg@bounce.twitter.com>
Received-SPF: pass (google.com: domain of z00cb00917uu=uhfrlvahany.arg@bounce.twitter.com designates 199.16.156.171 as permitted sender) client-ip=199.16.156.171;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of z00cb00917uu=uhfrlvahany.arg@bounce.twitter.com designates 199.16.156.171 as permitted sender) smtp.mail=z00cb00917uu=uhfrlvahany.arg@bounce.twitter.com;
From: "User (via Twitter)" <i-uu=uhfrlvahany.arg-71a04@postmaster.twitter.com>
Hotmail:
Authentication-Results: hotmail.com; spf=pass (sender IP is 199.59.150.99; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=zdca9fe917uhfrlvahany=zfa.pbz@bounce.twitter.com;
X-SID-PRA: i-uhfrlvahany=zfa.pbz-077df@postmaster.twitter.com
Return-Path: zdca9fe917uhfrlvahany=zfa.pbz@bounce.twitter.com
From: "User (via Twitter)" <i-uhfrlvahany=zfa.pbz-077df@postmaster.twitter.com>
Office 365:
Received-SPF: pass (mail68-co1: domain of bounce.twitter.com designates 199.16.156.171 as permitted sender) client-ip=199.16.156.171; envelope-from=z4928f1917uhfrlva.hany=fvzgrearg.pbz@bounce.twitter.com;
Return-Path: z4928f1917uhfrlva.hany=fvzgrearg.pbz@bounce.twitter.com
From: "Username (via Twitter)"
<i-uhfrlva.hany=fvzgrearg.pbz-7cd35@postmaster.twitter.com>
We are using SPF control by transport rule, that's way some emails going to junk folder.
Do you have any idea about that?