# Failed SPF infusionmail.com IPs

**URL:** <https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055>\
**Category:** Max Classic\
**Created:** [September 11, 2018, 4:53pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055 "2018-09-11T16:53:03Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ian\_F\_Hood](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/ian_f_hood/32/6838_2.png) [@Ian\_F\_Hood](https://integration.keap.com/u/Ian_F_Hood)\
**Post date:** [September 11, 2018, 4:53pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/1 "2018-09-11T16:53:04Z")

</div>

Martin, we updated our SPF record back to that suggested by your admins. Below you’ll find a DMARC report with several infusionmail ips that are failing SPF. They are: 35.227.130.41, 35.227.130.44, 35.227.130.47, 35.227.130.56, 35.227.130.59, and 35.227.130.62

Thank you for looking into this.

Regards,

Ian

 \<?xml version="1.0" encoding="UTF-8" ?\>

```
<feedback>
  <report_metadata>
    <org_name>google.com</org_name>
    <email>noreply-dmarc-support@google.com</email>
    <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
    <report_id>9735508897688688655</report_id>
    <date_range>
      <begin>1536537600</begin>
      <end>1536623999</end>
    </date_range>
  </report_metadata>
  <policy_published>
    <domain>themarkofmastery.com</domain>
    <adkim>r</adkim>
    <aspf>r</aspf>
    <p>none</p>
    <sp>none</sp>
    <pct>100</pct>
  </policy_published>
  <record>
    <row>
      <source_ip>35.227.130.47</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>35.227.130.62</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>35.227.130.59</source_ip>
      <count>2</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>35.227.130.56</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>35.227.130.44</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
  <record>
    <row>
      <source_ip>35.227.130.41</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>pass</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>themarkofmastery.com</header_from>
    </identifiers>
    <auth_results>
      <dkim>
        <domain>infusionmail.com</domain>
        <result>pass</result>
        <selector>dkim1024</selector>
      </dkim>
      <dkim>
        <domain>themarkofmastery.com</domain>
        <result>pass</result>
        <selector>1d484db4-fb80-488c-a059-2a8d52b56453</selector>
      </dkim>
      <spf>
        <domain>infusionmail.com</domain>
        <result>pass</result>
      </spf>
    </auth_results>
  </record>
</feedback>

```

---

<div class="post-metadata">

**Author:** ![Ian\_F\_Hood](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/ian_f_hood/32/6838_2.png) [@Ian\_F\_Hood](https://integration.keap.com/u/Ian_F_Hood)\
**Post date:** [September 17, 2018, 5:50pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/2 "2018-09-17T17:50:47Z")

</div>

Here is another:  
\<?xml version="1.0"?\>   
  
\<report\_metadata\>   
\<org\_name\>Yahoo! Inc.\</org\_name\>   
[postmaster@dmarc.yahoo.com](mailto:postmaster@dmarc.yahoo.com)  
\<report\_id\>1537147251.912469\</report\_id\>   
\<date\_range\>   
1537056000   
1537142399   
\</date\_range\>   
\</report\_metadata\>   
\<policy\_published\>   
[themarkofmastery.com](http://themarkofmastery.com)  
r   
r

none

  
100   
\</policy\_published\>   
  
  
\<source\_ip\>35.227.130.46\</source\_ip\>   
1   
\<policy\_evaluated\>   
none   
pass   
fail   
\</policy\_evaluated\>   
  
  
\<header\_from\>themarkofmastery.com\</header\_from\>   
  
\<auth\_results\>   
  
[themarkofmastery.com](http://themarkofmastery.com)  
pass   
  
  
[infusionmail.com](http://infusionmail.com)  
pass   
  
\</auth\_results\>

---

<div class="post-metadata">

**Author:** ![martinc](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/martinc/32/14_2.png) [@martinc](https://integration.keap.com/u/martinc)\
**Post date:** [September 17, 2018, 6:03pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/3 "2018-09-17T18:03:40Z")

</div>

Invited @David\_Carriger on September 17, 2018, 6:03pm UTC



---

<div class="post-metadata">

**Author:** ![martinc](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/martinc/32/14_2.png) [@martinc](https://integration.keap.com/u/martinc)\
**Post date:** [September 17, 2018, 6:43pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/4 "2018-09-17T18:43:18Z")

</div>

Made this topic public on September 17, 2018, 6:43pm UTC



---

<div class="post-metadata">

**Author:** ![David\_Carriger](https://avatars.discourse-cdn.com/v4/letter/d/dec6dc/32.png) [@David\_Carriger](https://integration.keap.com/u/David_Carriger)\
**Post date:** [September 17, 2018, 7:27pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/5 "2018-09-17T19:27:56Z")

</div>

It seems there’s some confusion on how to interpret the DMARC reports. Those IPs are _not_ failing SPF. The [infusionmail.com](http://infusionmail.com) SPF record clearly allows them:

v=spf1 a:infusionsoft.com ip4:208.76.24.0/22 ip4:35.227.130.0/24 ip4:70.166.203.186 ip4:70.166.203.176/28 ip4:70.166.189.64/29 -all

All of those IPs fall within the 35.227.130.0/24 IP range allowed by [infusionmail.com](http://infusionmail.com)’s SPF record. Instead, they are failing SPF _alignment_. The domain used in the “MAIL FROM” portion of the SMTP transaction is “[infusionmail.com](http://infusionmail.com)”. The domain used in the “From:” header of the email is “[themarkofmastery.com](http://themarkofmastery.com)”. Therefore, even though SPF passes ([infusionmail.com](http://infusionmail.com) authorizes IP addresses within the 35.227.130.0/24 range), it fails DMARC’s alignment requirements.

DMARC requires that _either_ SPF or DMARC passes and is aligned, not both. Infusionsoft is DMARC-compliant through the use of DKIM, which does pass alignment (as shown in your DMARC report). We will not pass DMARC’s SPF alignment test since we do not use your domain as the sending domain during the “MAIL FROM” portion of the SMTP transaction. This is intentional - the “MAIL FROM” email address is also the “Return-Path” address where bounce notifications are sent, which allows us to remove invalid email addresses from your list to preserve your (and our) deliverability.

---

<div class="post-metadata">

**Author:** ![Ian\_F\_Hood](https://sea1.discourse-cdn.com/flex019/user_avatar/integration.keap.com/ian_f_hood/32/6838_2.png) [@Ian\_F\_Hood](https://integration.keap.com/u/Ian_F_Hood)\
**Post date:** [September 19, 2018, 5:14pm UTC](https://integration.keap.com/t/failed-spf-infusionmail-com-ips/52055/6 "2018-09-19T17:14:25Z")

</div>

Thank you for clarifying! We will tighten down our SPF record and consider this resolved.