<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Steven,</p>
<p>Yeah, good catch. I spotted my mistake and was halfway through
fixing it when your email came through.</p>
<p>I'll run through the DKIM records this evening and see what needs
to be updated / what we need to update you on.</p>
<p></p>
<span style="color:black">Kind regards,</span><br>
<span style="color:black">Gary O'Donovan (22971584)</span><br>
<br>
<div class="moz-cite-prefix">On 13/02/2024 3:43 pm, Steven Lim
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ME3PR01MB60875708103BB313A38C72ECA04F2@ME3PR01MB6087.ausprd01.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Aptos;}@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}p.elementtoproof, li.elementtoproof, div.elementtoproof
{mso-style-name:elementtoproof;
margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}span.elementtoproof1
{mso-style-name:elementtoproof1;}span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">Hi Gary<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">I can
see that you’ve updated the SPF for mailfish across
ucc.gu.uwa.edu.au, ucc.guild.uwa.edu.au and ucc.asn.au but
not the actual parent domain SPF records for
ucc.gu.uwa.edu.au, ucc.guild.uwa.edu.au and ucc.asn.au<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">These
still have v=spf1 ip4:203.27.114.0/23 ip4:130.95.0.0/16
include:spf.smtp-engine.com include:spf.forwardemail.net
~all instead of v=spf1 ip4:203.27.114.0/23
ip4:130.95.13.0/24 include:spf.forwardemail.net<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">They
should be the same as mailfish.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">We
probably need to have a quick chat re. your DKIM record(s)
as I see you have some newer records (see below)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ucc.asn.au<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">--------------<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1;
k=rsa; t=s;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1;
k=rsa; t=s;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">ucc.guild.uwa.edu.au</span><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1;
k=rsa; t=s;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">ucc.gu.uwa.edu.au</span><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">--</span><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1;
k=rsa; t=s;
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span
style="font-family:"Arial",sans-serif;color:#27348B">Steven
Lim<o:p></o:p></span></b></p>
<p class="MsoNormal" style="background:white"><b><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager
System Administration<o:p></o:p></span></b></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University
IT</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div
style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US"> Steven Lim <a class="moz-txt-link-rfc2396E" href="mailto:steven.lim@uwa.edu.au"><steven.lim@uwa.edu.au></a>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 3:01 PM<br>
<b>To:</b> Gary O'Donovan (22971584)
<a class="moz-txt-link-rfc2396E" href="mailto:22971584@student.uwa.edu.au"><22971584@student.uwa.edu.au></a><br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:wheel@ucc.gu.uwa.edu.au">wheel@ucc.gu.uwa.edu.au</a>; <a class="moz-txt-link-abbreviated" href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a><br>
<b>Subject:</b> RE: [tech] [wheel] UCC SPF\DKIM records<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">Hi Gary<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">I’ve
only added it as a trusted domain for me personally, not
across the entire UWA tenant.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">Re.
guild MX, interesting but I assume they assumed no internal
record was required. We also host very little internal email
related records..e.g. 90%+ of our SPF\DKIM\DMARC records are
external DNS only<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">I’ll
update our records…can I confirm that’s for ucc.asn.au,
ucc.gu.uwa.edu.au and ucc.guild.uwa.edu.au?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US">ta<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span
style="font-family:"Arial",sans-serif;color:#27348B">Steven
Lim<o:p></o:p></span></b></p>
<p class="MsoNormal" style="background:white"><b><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager
System Administration<o:p></o:p></span></b></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University
IT</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div
style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US"> Gary O'Donovan (22971584) <<a
href="mailto:22971584@student.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">22971584@student.uwa.edu.au</a>>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 2:23 PM<br>
<b>To:</b> Steven Lim <<a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">wheel@ucc.gu.uwa.edu.au</a>;
<a href="mailto:tech@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">
tech@ucc.asn.au</a><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM records<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">Hi Steven,</span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p><span class="elementtoproof1"><span style="color:black">Hopefully
adding ucc.asn.au as a trusted domain will fix some of our
issues, as we currently have an open ticket (INC0789622)
regarding email deliverability to UWA addresses.</span></span><o:p></o:p></p>
<p class="elementtoproof"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">I'll mention
it here since it is the most important one at the moment,
currently UWA internal DNS does not have an MX entry for
Guild's "new" (year-old) M365 tenancy, so Guild have not
been able to receive emails from us as it defaults to their
A record. I've already made Kelvin from Guild IT aware of
this and the ticket. </span><o:p></o:p></p>
<p class="elementtoproof"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">We've also
removed smtp-engine, and refined 130.95.0.0/16 down to
130.95.13.0/24 in our SPF record.</span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">Cheers,</span><o:p></o:p></p>
<p class="elementtoproof"><span style="color:black">Gary
O'Donovan (22971584) - <a href="mailto:zixty@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">
zixty@ucc.asn.au</a></span><o:p></o:p></p>
<div class="MsoNormal" style="text-align:center" align="center">
<hr width="98%" size="2" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">
Steven Lim <<a href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a>><br>
<b>Sent:</b> Tuesday, 13 February 2024 1:51 PM<br>
<b>To:</b> Gary O'Donovan (22971584) <<a
href="mailto:22971584@student.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">22971584@student.uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">wheel@ucc.gu.uwa.edu.au</a>
<<a href="mailto:wheel@ucc.gu.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">wheel@ucc.gu.uwa.edu.au</a>>;
<a href="mailto:tech@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">tech@ucc.asn.au</a> <<a
href="mailto:tech@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">tech@ucc.asn.au</a>><br>
<b>Subject:</b> RE: [tech] [wheel] UCC SPF\DKIM records</span>
<o:p></o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="xmsonormal"><span style="font-size:11.0pt">Hi Gary
et al</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">Sorry,
I just found them in my junk. I’ve just added ucc.asn.au
as a trusted domain
</span><span
style="font-size:11.0pt;font-family:"Segoe UI Emoji",sans-serif">😊</span><span
style="font-size:11.0pt"> Interesting that it was junked
given that SPF\DKIM\DMARC appears compliant. Anyway,
I’ve updated our records re. the DKIM records to PostFix
on mailfish.ucc.asn.au</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">As SPF
is also application\server specific, you should really
lock that down to 13.95.13.30</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">I’ve
updated our notes on 203.27.114.0/23 based on your
comments.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">When
you get rid of smtp-engine..just let me know and I’ll
remove it from our records.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">Thanks</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div>
<p class="xmsonormal" style="background:white"><span
style="font-family:"Arial",sans-serif;color:#27348B">--</span><o:p></o:p></p>
<p class="xmsonormal" style="background:white"><b><span
style="font-family:"Arial",sans-serif;color:#27348B">Steven
Lim</span></b><o:p></o:p></p>
<p class="xmsonormal" style="background:white"><b><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager
System Administration</span></b><o:p></o:p></p>
<p class="xmsonormal"><span
style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University
IT</span><o:p></o:p></p>
</div>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div>
<div
style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="xmsonormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"
lang="EN-US"> Gary O'Donovan (22971584) <<a
href="mailto:22971584@student.uwa.edu.au"
moz-do-not-send="true"
class="moz-txt-link-freetext">22971584@student.uwa.edu.au</a>>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 11:20 AM<br>
<b>To:</b> Steven Lim <<a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"
class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au"
moz-do-not-send="true"
class="moz-txt-link-freetext">wheel@ucc.gu.uwa.edu.au</a>;
<a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true"
class="moz-txt-link-freetext">
tech@ucc.asn.au</a><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM
records</span><o:p></o:p></p>
</div>
</div>
<p class="xmsonormal"> <o:p></o:p></p>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven,</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Forwarding
this chain on from my student email as it appears you
are not seeing our mail.</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">--------
Original Message -------- </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Subject:
Re: [wheel] UCC SPF\DKIM records Date: 2024-02-12 2:09
pm </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">From: Matt
Johnston <</span><a href="mailto:matt@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">matt@ucc.asn.au</a><span
style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">To: Steven
Lim <</span><a href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a><span
style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Copy:
James Andrewartha <</span><a
href="mailto:trs80@ucc.gu.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">trs80@ucc.gu.uwa.edu.au</a><span
style="color:black">>, UCC Wheel Group <</span><a
href="mailto:wheel@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">wheel@ucc.asn.au</a><span
style="color:black">>,
</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">tpg@ucc.asn.au</a><span
style="color:black">,
</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">tech@ucc.asn.au</a><span
style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven.
I replied on 3 Feb, copied below. Most of the records
are still necessary. Unsure why you didn't receive my
email, it was delivered from UCC to the Outlook
server. Feb 3 10:08:36 mailfish
postfix/smtp[2069977]: 8BE482A2AEF: to=<</span><a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a><span
style="color:black">>,
relay=uwa-edu-au.mail.protection.outlook.com[104.47.71.138]:25,
delay=6.3, delays=0.17/0.01/4.9/1.2, dsn=2.6.0,
status=sent (250 2.6.0 <</span><a
href="mailto:6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au</a><span
style="color:black">> [InternalId=99797860092462,
Hostname=SY6PR01MB7429.ausprd01.prod.outlook.com]
15139 bytes in 0.073, 200.858 KB/sec Queued mail for
delivery) </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Cheers,
Matt </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">--------
Original Message -------- </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Subject:
Re: [wheel] UCC SPF\DKIM records Date: 2024-02-03
10:08 am </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">From: Matt
Johnston <</span><a href="mailto:matt@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">matt@ucc.asn.au</a><span
style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">To: Steven
Lim <</span><a href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">steven.lim@uwa.edu.au</a><span
style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Copy:
James Andrewartha <</span><a
href="mailto:trs80@ucc.gu.uwa.edu.au"
moz-do-not-send="true" class="moz-txt-link-freetext">trs80@ucc.gu.uwa.edu.au</a><span
style="color:black">>, UCC Wheel Group <</span><a
href="mailto:wheel@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">wheel@ucc.asn.au</a><span
style="color:black">>,
</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">tpg@ucc.asn.au</a><span
style="color:black">,
</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true" class="moz-txt-link-freetext">tech@ucc.asn.au</a><span
style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven,
The DKIM record is still used and correct, headers of
email sent from UCC are signed with that key. Without
it the email deliverability decreases significantly
(ends up in recipient spam folders instead).
</span><a
href="https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/</a><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">The SPF
record for 130.95.0.0/16 covers the current sending
address (130.95.13.30), though could now be limited to
just .13/24. We can remove the ironports, thanks for
the reminder. (We set it to the entirety of UWA at one
point because outbound mailservers were being changed
without any notification, so didn't want to get caught
out). The 203.27.114.0/23 is enabled to allow sending
mail from off-site UCC servers that use .ucc.asn.au
subdomains too. I think smtp-engine.com was an
experiment with a 3rd party outbound provider, that
can be removed. We'll get that done </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Cheers,
Matt</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Kind
regards,</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Gary
O'Donovan (22971584) - </span>
<a href="mailto:zixty@ucc.asn.au" moz-do-not-send="true"
class="moz-txt-link-freetext">zixty@ucc.asn.au</a><o:p></o:p></p>
</div>
<div class="MsoNormal" style="text-align:center"
align="center">
<hr width="98%" size="2" align="center">
</div>
<div id="x_divRplyFwdMsg">
<p class="xmsonormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">
tech <</span><a
href="mailto:tech-bounces+22971584=student.uwa.edu.au@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech-bounces+22971584=student.uwa.edu.au@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>
on behalf of Matt Johnston <</span><a
href="mailto:matt@ucc.asn.au" moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">matt@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Sent:</b> Monday, 12 February 2024 2:08 PM<br>
<b>To:</b> Steven Lim <</span><a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">steven.lim@uwa.edu.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Cc:</b> James Andrewartha <</span><a
href="mailto:trs80@ucc.gu.uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">trs80@ucc.gu.uwa.edu.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>;
UCC Wheel Group <</span><a
href="mailto:wheel@ucc.asn.au" moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">wheel@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>;
</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">tpg@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">
<</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">tpg@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>;
</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">
<</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech@ucc.asn.au</span></a><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM
records</span> <o:p></o:p></p>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="xmsonormal"><span style="font-size:11.0pt">Hi
Steven.<br>
<br>
I replied on 3 Feb, copied below. Most of the
records are still <br>
necessary.<br>
<br>
Unsure why you didn't receive my email, it was
delivered from UCC to the <br>
Outlook server.<br>
<br>
Feb 3 10:08:36 mailfish postfix/smtp[2069977]:
8BE482A2AEF: <br>
to=<</span><a href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span
style="font-size:11.0pt">>,
<br>
relay=uwa-edu-au.mail.protection.outlook.com[104.47.71.138]:25, <br>
delay=6.3, delays=0.17/0.01/4.9/1.2, dsn=2.6.0,
status=sent (250 2.6.0 <br>
<</span><a
href="mailto:6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au</span></a><span
style="font-size:11.0pt">>
<br>
[InternalId=99797860092462, <br>
Hostname=SY6PR01MB7429.ausprd01.prod.outlook.com]
15139 bytes in 0.073, <br>
200.858 KB/sec Queued mail for delivery)<br>
<br>
<br>
<br>
Cheers,<br>
Matt<br>
<br>
<br>
-------- Original Message --------<br>
Subject: Re: [wheel] UCC SPF\DKIM records<br>
Date: 2024-02-03 10:08 am<br>
From: Matt Johnston <</span><a
href="mailto:matt@ucc.asn.au" moz-do-not-send="true"><span
style="font-size:11.0pt">matt@ucc.asn.au</span></a><span
style="font-size:11.0pt">><br>
To: Steven Lim <</span><a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span
style="font-size:11.0pt">><br>
Copy: James Andrewartha <</span><a
href="mailto:trs80@ucc.gu.uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">trs80@ucc.gu.uwa.edu.au</span></a><span
style="font-size:11.0pt">>, UCC Wheel Group
<br>
<</span><a href="mailto:wheel@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">wheel@ucc.asn.au</span></a><span
style="font-size:11.0pt">>,
</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">tpg@ucc.asn.au</span></a><span
style="font-size:11.0pt">,
</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">tech@ucc.asn.au</span></a><span
style="font-size:11.0pt"><br>
<br>
Hi Steven,<br>
<br>
The DKIM record is still used and correct, headers
of email sent from <br>
UCC are signed with that key.<br>
Without it the email deliverability decreases
significantly (ends up in <br>
recipient spam folders instead).<br>
</span><a
href="https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cloudflare.com%2Fen-gb%2Flearning%2Femail-security%2Fdmarc-dkim-spf%2F&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894298736%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=P8tZLDZjcZthrPBKI2Th7e1pfGa21eYVF9mWTwvsVkg%3D&reserved=0</span></a><span
style="font-size:11.0pt"><br>
<br>
The SPF record for 130.95.0.0/16 covers the current
sending address <br>
(130.95.13.30), though could now be limited to just
.13/24. We can <br>
remove the ironports, thanks for the reminder.<br>
(We set it to the entirety of UWA at one point
because outbound <br>
mailservers were being changed without any
notification, so didn't want <br>
to get caught out).<br>
The 203.27.114.0/23 is enabled to allow sending mail
from off-site UCC <br>
servers that use .ucc.asn.au subdomains too.<br>
I think smtp-engine.com was an experiment with a 3rd
party outbound <br>
provider, that can be removed. We'll get that done<br>
<br>
Cheers,<br>
Matt<br>
<br>
<br>
On 2024-02-12 1:54 pm, Steven Lim wrote:<br>
> Hi UCC<br>
> <br>
> We are trying to get updates on DNS records as
per below. Can you<br>
> please provide an update or additional contact
information to discuss.<br>
> If we receive no response in the next week or
two then we will<br>
> commence removing records we deem as not
required, specifically the<br>
> records<br>
> * ucc-2016.3 DKIM records<br>
> *130.95.0.0 entry in the SPF record<br>
> * ip4:139.138.31.0/24 ip4:139.138.42.0/24
IronPort records in the SPF<br>
> record as this system is being decommissioned<br>
> <br>
> Thanks<br>
> <br>
> --<br>
> Steven Lim<br>
> Manager System Administration<br>
> University IT . B658 R206, M463, Perth WA
6009 Australia<br>
> P +61 8 6488 2970 M +61 4 3856 1173 . E </span><a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span
style="font-size:11.0pt"> (inc
<br>
> Teams)<br>
> <br>
> <br>
> -----Original Message-----<br>
> From: Steven Lim<br>
> Sent: Thursday, February 1, 2024 9:48 AM<br>
> To: 'James Andrewartha' <</span><a
href="mailto:trs80@ucc.gu.uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">trs80@ucc.gu.uwa.edu.au</span></a><span
style="font-size:11.0pt">><br>
> Cc: 'UCC Wheel Group' <</span><a
href="mailto:wheel@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">wheel@ucc.asn.au</span></a><span
style="font-size:11.0pt">>; '<a class="moz-txt-link-abbreviated" href="mailto:tpg@ucc.asn.au">tpg@ucc.asn.au</a>'<br>
> <</span><a href="mailto:tpg@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">tpg@ucc.asn.au</span></a><span
style="font-size:11.0pt">>; '<a class="moz-txt-link-abbreviated" href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a>'
<</span><a href="mailto:tech@ucc.asn.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">tech@ucc.asn.au</span></a><span
style="font-size:11.0pt">><br>
> Subject: UCC SPF\DKIM records<br>
> <br>
> Hi James et al<br>
> <br>
> We're just reviewing DNS records related to
SPF\DKIM. We note that the<br>
> UCC have some records in place and we're after
additional information.<br>
> The records in question are as follows:<br>
> <br>
> Domain Type Usage
Record Value<br>
> Ucc.asn.au TXT DKIM
ucc-2016-3._domainkey.ucc.asn.au. v=DKIM1;
k=rsa;<br>
> t=y;<br>
>
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Ucc.gu.uwa.edu.au TXT DKIM
ucc-2016-3._domainkey.ucc.gu.uwa.edu.au.
v=DKIM1;<br>
> k=rsa; t=y;<br>
>
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Ucc.guild.uwa.edu.au TXT DKIM
ucc-2016-3._domainkey.guild.uwa.edu.au. v=DKIM1;<br>
> k=rsa; t=y;<br>
>
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Each of the domains also has the following SPF
record:<br>
> <br>
> v=spf1 ip4:203.27.114.0/23 ip4:130.95.0.0/16
ip4:139.138.31.0/24<br>
> ip4:139.138.42.0/24 include:spf.smtp-engine.com<br>
> include:spf.forwardemail.net ~all<br>
> <br>
> Could you please advise:<br>
> 1. What is the DKIM record
ucc-2016-3._domainkey used for? Is it still <br>
> required?<br>
> 2. What are the following SPF records required
for and are they still <br>
> required?<br>
> a. ip4:203.27.114.0/23, appears to be
your entire network<br>
> b. ip4:130.95.0.0/16, the entire UWA
network<br>
> c. ip4:139.138.31.0/24
ip4:139.138.42.0/24 UWA IronPorts, soon to be<br>
> phased out. The first record has already been
decommissioned<br>
> d. include:spf.smtp-engine.com, Unknown<br>
> <br>
> If you could get back to me asap.<br>
> <br>
> ta<br>
> --<br>
> Steven Lim<br>
> Manager System Administration<br>
> University IT . B658 R206, M463, Perth WA
6009 Australia P +61 8<br>
> 6488 2970 M +61 4 3856 1173 . E </span><a
href="mailto:steven.lim@uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span
style="font-size:11.0pt"> (inc Teams) C<br>
> </span><a
href="https://uwa.zoom.us/my/stevenjlim"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fuwa.zoom.us%2Fmy%2Fstevenjlim&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894306315%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=vVsDv%2Fy04JmAr9%2BX1%2FPNsSrFZRFnpxWyO3W2OuGONFI%3D&reserved=0</span></a><span
style="font-size:11.0pt"><br>
> <br>
> <br>
_______________________________________________<br>
List Archives: </span><a
href="http://lists.ucc.asn.au/pipermail/tech"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ucc.asn.au%2Fpipermail%2Ftech&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894310947%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=nTQGn2uFBzv8YV2yAzj52wHx%2FT40E8fOXOMQutKlkjg%3D&reserved=0</span></a><span
style="font-size:11.0pt"><br>
<br>
Unsubscribe here: </span><a
href="https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/22971584%40student.uwa.edu.au"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ucc.gu.uwa.edu.au%2Fmailman%2Foptions%2Ftech%2F22971584%2540student.uwa.edu.au&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894315432%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=1rRlb8agVOXKVYTQTTD3y8NHL1fAbKtHgndwDFJJfmY%3D&reserved=0</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</body>
</html>