On 22/07/2010, at 4:04 PM, Regan Murphy wrote:
This line from the rejection: "22.214.171.124 is
not allowed to send mail from oasystems.co.nz" is saying the host grunge.hosts.net.nz
is not allowed to send email on behalf of oasystems.co.nz which is correct, it's not.
So SPF is behaving as intended: a host is sending mail on behalf of a domain which is not
listed in that domain’s SPF record, so the mail is being rejected. To change this, you
could either update the SPF record to include that host, or stop that host from sending
mail for the domain.
Although many SPF failures are due to sender misconfiguration, this can also happen due to
a misconfiguration on the receiver’s part. Looking at your original message again, the
headers would suggest that this might be the case here; the receiver might not be checking
SPF at the border, but rather one or more mail hops further inside their network. See the
first item at http://www.openspf.org/FAQ/Common_receiver_mistakes