Spam domene preko googla, tudi po SPF spremembi

Howdy.

Imam eno tezavo, za katero upam, da mi zna kdo tukaj svetovati, in sicer opazam, da v zadnjih dneh pri dolocenih narocnikih zacel posiljat random spam (dobivam bounce na default address).

Posta se ne posilja iz streznika gostovanja (narejen email trace), ampak prihaja iz razlicnih IPjev direktno na Googlov mail exhange server.

Glede na Googlova SPF navodila, sem spremenil txt zapis na v=spf1 include:_spf.google.com ~all, a je se vedno enako, samo neutral se je spremenil v softfail.

X-Received: by 10.157.50.245 with SMTP id u108xxxx5otb.43.145xxxxx417;

        Wed, 30 Mar 2016 05:18:44 -0700 (PDT)

Return-Path: <softley-stubbsCary02@NAROCNIK>

Received: from [41.222.181.164] ([41.222.181.164])

        by mx.google.com with ESMTP id w3si2071297oey.69.2016.03.30.05.18.43

        for <ironicaffectation@NASLOVNIK>;

        Wed, 30 Mar 2016 05:18:44 -0700 (PDT)

Received-SPF: softfail (google.com: domain of transitioning softley-stubbsCary02@NAROCNIK does not designate 41.222.181.164 as permitted sender) client-ip=41.222.181.164;

Authentication-Results: mx.google.com;

       spf=softfail (google.com: domain of transitioning softley-stubbsCary02@NAROCNIK does not designate 41.222.181.164 as permitted sender) smtp.mailfrom=softley-stubbsCary02@NAROCNIK

Date: Wed, 30 Mar 2016 15:18:43 +0300

Subject: FW:Expenses Report # 876851 - 03/2016

Message-ID: <71122c7d-28d8-4ec5-a411-2881d08415db@NASLOVNIK>

From: Cary softley-stubbs <softley-stubbsCary02@NAROCNIK>

To: ironicaffectation <ironicaffectation@NASLOVNIK>

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_com.boxer.email_4899957033859"

Gre za tri locene domene, na treh razlicnih streznikih. Edina skupna lastnost je to, da vse tri uporabljajo gmail za posiljanje poste.

Za kak nasvet se vnaprej zahvaljujem!

SPF nastavi na hard fail ce bi rad da se mail posilja le od 'authenticated user'.