<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.elementtoproof, li.elementtoproof, div.elementtoproof
{mso-style-name:elementtoproof;
margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
span.elementtoproof1
{mso-style-name:elementtoproof1;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">Hi Gary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">I can see that you’ve updated the SPF for mailfish across ucc.gu.uwa.edu.au, ucc.guild.uwa.edu.au and ucc.asn.au but not the actual parent domain SPF records for ucc.gu.uwa.edu.au,
ucc.guild.uwa.edu.au and ucc.asn.au<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">These still have v=spf1 ip4:203.27.114.0/23 ip4:130.95.0.0/16 include:spf.smtp-engine.com include:spf.forwardemail.net ~all instead of v=spf1 ip4:203.27.114.0/23 ip4:130.95.13.0/24
include:spf.forwardemail.net<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">They should be the same as mailfish.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">We probably need to have a quick chat re. your DKIM record(s) as I see you have some newer records (see below)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ucc.asn.au<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">--------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">ucc.guild.uwa.edu.au</span><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">ucc.gu.uwa.edu.au</span><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">--</span><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ucc-2016-3.dk2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Arial",sans-serif;color:#27348B">Steven Lim<o:p></o:p></span></b></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager System Administration<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University IT</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Steven Lim <steven.lim@uwa.edu.au>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 3:01 PM<br>
<b>To:</b> Gary O'Donovan (22971584) <22971584@student.uwa.edu.au><br>
<b>Cc:</b> wheel@ucc.gu.uwa.edu.au; tech@ucc.asn.au<br>
<b>Subject:</b> RE: [tech] [wheel] UCC SPF\DKIM records<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">Hi Gary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">I’ve only added it as a trusted domain for me personally, not across the entire UWA tenant.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">Re. guild MX, interesting but I assume they assumed no internal record was required. We also host very little internal email related records..e.g. 90%+ of our SPF\DKIM\DMARC records
are external DNS only<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">I’ll update our records…can I confirm that’s for ucc.asn.au, ucc.gu.uwa.edu.au and ucc.guild.uwa.edu.au?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US">ta<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B">--<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Arial",sans-serif;color:#27348B">Steven Lim<o:p></o:p></span></b></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager System Administration<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University IT</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Gary O'Donovan (22971584) <<a href="mailto:22971584@student.uwa.edu.au">22971584@student.uwa.edu.au</a>>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 2:23 PM<br>
<b>To:</b> Steven Lim <<a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au">wheel@ucc.gu.uwa.edu.au</a>; <a href="mailto:tech@ucc.asn.au">
tech@ucc.asn.au</a><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM records<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">Hi Steven,</span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p><span class="elementtoproof1"><span style="color:black">Hopefully adding ucc.asn.au as a trusted domain will fix some of our issues, as we currently have an open ticket (INC0789622) regarding email deliverability to UWA addresses.</span></span><o:p></o:p></p>
<p class="elementtoproof"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">I'll mention it here since it is the most important one at the moment, currently UWA internal DNS does not have an MX entry for Guild's "new" (year-old) M365 tenancy, so Guild have not been able to receive
emails from us as it defaults to their A record. I've already made Kelvin from Guild IT aware of this and the ticket. </span><o:p></o:p></p>
<p class="elementtoproof"><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">We've also removed smtp-engine, and refined 130.95.0.0/16 down to 130.95.13.0/24 in our SPF record.</span><o:p></o:p></p>
<p><o:p> </o:p></p>
<p class="elementtoproof"><span style="color:black">Cheers,</span><o:p></o:p></p>
<p class="elementtoproof"><span style="color:black">Gary O'Donovan (22971584) - <a href="mailto:zixty@ucc.asn.au">
zixty@ucc.asn.au</a></span><o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> Steven Lim <<a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a>><br>
<b>Sent:</b> Tuesday, 13 February 2024 1:51 PM<br>
<b>To:</b> Gary O'Donovan (22971584) <<a href="mailto:22971584@student.uwa.edu.au">22971584@student.uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au">wheel@ucc.gu.uwa.edu.au</a> <<a href="mailto:wheel@ucc.gu.uwa.edu.au">wheel@ucc.gu.uwa.edu.au</a>>;
<a href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a> <<a href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a>><br>
<b>Subject:</b> RE: [tech] [wheel] UCC SPF\DKIM records</span> <o:p></o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="xmsonormal"><span style="font-size:11.0pt">Hi Gary et al</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">Sorry, I just found them in my junk. I’ve just added ucc.asn.au as a trusted domain
</span><span style="font-size:11.0pt;font-family:"Segoe UI Emoji",sans-serif">😊</span><span style="font-size:11.0pt"> Interesting that it was junked given that SPF\DKIM\DMARC appears compliant. Anyway, I’ve updated our records re. the DKIM records to PostFix
on mailfish.ucc.asn.au</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">As SPF is also application\server specific, you should really lock that down to 13.95.13.30</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">I’ve updated our notes on 203.27.114.0/23 based on your comments.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">When you get rid of smtp-engine..just let me know and I’ll remove it from our records.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt">Thanks</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div>
<p class="xmsonormal" style="background:white"><span style="font-family:"Arial",sans-serif;color:#27348B">--</span><o:p></o:p></p>
<p class="xmsonormal" style="background:white"><b><span style="font-family:"Arial",sans-serif;color:#27348B">Steven Lim</span></b><o:p></o:p></p>
<p class="xmsonormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#27348B">Manager System Administration</span></b><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:11.0pt;font-family:"Arial",sans-serif;color:#4C4C4E">University IT</span><o:p></o:p></p>
</div>
<p class="xmsonormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="xmsonormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Gary O'Donovan (22971584) <<a href="mailto:22971584@student.uwa.edu.au">22971584@student.uwa.edu.au</a>>
<br>
<b>Sent:</b> Tuesday, February 13, 2024 11:20 AM<br>
<b>To:</b> Steven Lim <<a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a>><br>
<b>Cc:</b> <a href="mailto:wheel@ucc.gu.uwa.edu.au">wheel@ucc.gu.uwa.edu.au</a>; <a href="mailto:tech@ucc.asn.au">
tech@ucc.asn.au</a><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM records</span><o:p></o:p></p>
</div>
</div>
<p class="xmsonormal"> <o:p></o:p></p>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven,</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Forwarding this chain on from my student email as it appears you are not seeing our mail.</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">-------- Original Message -------- </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Subject: Re: [wheel] UCC SPF\DKIM records Date: 2024-02-12 2:09 pm </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">From: Matt Johnston <</span><a href="mailto:matt@ucc.asn.au">matt@ucc.asn.au</a><span style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">To: Steven Lim <</span><a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a><span style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Copy: James Andrewartha <</span><a href="mailto:trs80@ucc.gu.uwa.edu.au">trs80@ucc.gu.uwa.edu.au</a><span style="color:black">>, UCC Wheel Group <</span><a href="mailto:wheel@ucc.asn.au">wheel@ucc.asn.au</a><span style="color:black">>,
</span><a href="mailto:tpg@ucc.asn.au">tpg@ucc.asn.au</a><span style="color:black">,
</span><a href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven. I replied on 3 Feb, copied below. Most of the records are still necessary. Unsure why you didn't receive my email, it was delivered from UCC to the Outlook server. Feb 3 10:08:36 mailfish postfix/smtp[2069977]:
8BE482A2AEF: to=<</span><a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a><span style="color:black">>, relay=uwa-edu-au.mail.protection.outlook.com[104.47.71.138]:25, delay=6.3, delays=0.17/0.01/4.9/1.2, dsn=2.6.0, status=sent (250 2.6.0 <</span><a href="mailto:6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au">6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au</a><span style="color:black">>
[InternalId=99797860092462, Hostname=SY6PR01MB7429.ausprd01.prod.outlook.com] 15139 bytes in 0.073, 200.858 KB/sec Queued mail for delivery) </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Cheers, Matt </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">-------- Original Message -------- </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Subject: Re: [wheel] UCC SPF\DKIM records Date: 2024-02-03 10:08 am </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">From: Matt Johnston <</span><a href="mailto:matt@ucc.asn.au">matt@ucc.asn.au</a><span style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">To: Steven Lim <</span><a href="mailto:steven.lim@uwa.edu.au">steven.lim@uwa.edu.au</a><span style="color:black">> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Copy: James Andrewartha <</span><a href="mailto:trs80@ucc.gu.uwa.edu.au">trs80@ucc.gu.uwa.edu.au</a><span style="color:black">>, UCC Wheel Group <</span><a href="mailto:wheel@ucc.asn.au">wheel@ucc.asn.au</a><span style="color:black">>,
</span><a href="mailto:tpg@ucc.asn.au">tpg@ucc.asn.au</a><span style="color:black">,
</span><a href="mailto:tech@ucc.asn.au">tech@ucc.asn.au</a><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Hi Steven, The DKIM record is still used and correct, headers of email sent from UCC are signed with that key. Without it the email deliverability decreases significantly (ends up in recipient spam folders instead).
</span><a href="https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/">https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/</a><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">The SPF record for 130.95.0.0/16 covers the current sending address (130.95.13.30), though could now be limited to just .13/24. We can remove the ironports, thanks for the reminder. (We set it to the entirety
of UWA at one point because outbound mailservers were being changed without any notification, so didn't want to get caught out). The 203.27.114.0/23 is enabled to allow sending mail from off-site UCC servers that use .ucc.asn.au subdomains too. I think smtp-engine.com
was an experiment with a 3rd party outbound provider, that can be removed. We'll get that done </span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Cheers, Matt</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Kind regards,</span><o:p></o:p></p>
</div>
<div>
<p class="xmsonormal"><span style="color:black">Gary O'Donovan (22971584) - </span>
<a href="mailto:zixty@ucc.asn.au">zixty@ucc.asn.au</a><o:p></o:p></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="x_divRplyFwdMsg">
<p class="xmsonormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> tech <</span><a href="mailto:tech-bounces+22971584=student.uwa.edu.au@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech-bounces+22971584=student.uwa.edu.au@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>
on behalf of Matt Johnston <</span><a href="mailto:matt@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">matt@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Sent:</b> Monday, 12 February 2024 2:08 PM<br>
<b>To:</b> Steven Lim <</span><a href="mailto:steven.lim@uwa.edu.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">steven.lim@uwa.edu.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Cc:</b> James Andrewartha <</span><a href="mailto:trs80@ucc.gu.uwa.edu.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">trs80@ucc.gu.uwa.edu.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>; UCC
Wheel Group <</span><a href="mailto:wheel@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">wheel@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>;
</span><a href="mailto:tpg@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">tpg@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <</span><a href="mailto:tpg@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">tpg@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">>;
</span><a href="mailto:tech@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <</span><a href="mailto:tech@ucc.asn.au"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">tech@ucc.asn.au</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">><br>
<b>Subject:</b> Re: [tech] [wheel] UCC SPF\DKIM records</span> <o:p></o:p></p>
<div>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="xmsonormal"><span style="font-size:11.0pt">Hi Steven.<br>
<br>
I replied on 3 Feb, copied below. Most of the records are still <br>
necessary.<br>
<br>
Unsure why you didn't receive my email, it was delivered from UCC to the <br>
Outlook server.<br>
<br>
Feb 3 10:08:36 mailfish postfix/smtp[2069977]: 8BE482A2AEF: <br>
to=<</span><a href="mailto:steven.lim@uwa.edu.au"><span style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span style="font-size:11.0pt">>,
<br>
relay=uwa-edu-au.mail.protection.outlook.com[104.47.71.138]:25, <br>
delay=6.3, delays=0.17/0.01/4.9/1.2, dsn=2.6.0, status=sent (250 2.6.0 <br>
<</span><a href="mailto:6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au"><span style="font-size:11.0pt">6d43f670c7eeb3f5d7db800349f0c5a7@ucc.asn.au</span></a><span style="font-size:11.0pt">>
<br>
[InternalId=99797860092462, <br>
Hostname=SY6PR01MB7429.ausprd01.prod.outlook.com] 15139 bytes in 0.073, <br>
200.858 KB/sec Queued mail for delivery)<br>
<br>
<br>
<br>
Cheers,<br>
Matt<br>
<br>
<br>
-------- Original Message --------<br>
Subject: Re: [wheel] UCC SPF\DKIM records<br>
Date: 2024-02-03 10:08 am<br>
From: Matt Johnston <</span><a href="mailto:matt@ucc.asn.au"><span style="font-size:11.0pt">matt@ucc.asn.au</span></a><span style="font-size:11.0pt">><br>
To: Steven Lim <</span><a href="mailto:steven.lim@uwa.edu.au"><span style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span style="font-size:11.0pt">><br>
Copy: James Andrewartha <</span><a href="mailto:trs80@ucc.gu.uwa.edu.au"><span style="font-size:11.0pt">trs80@ucc.gu.uwa.edu.au</span></a><span style="font-size:11.0pt">>, UCC Wheel Group
<br>
<</span><a href="mailto:wheel@ucc.asn.au"><span style="font-size:11.0pt">wheel@ucc.asn.au</span></a><span style="font-size:11.0pt">>,
</span><a href="mailto:tpg@ucc.asn.au"><span style="font-size:11.0pt">tpg@ucc.asn.au</span></a><span style="font-size:11.0pt">,
</span><a href="mailto:tech@ucc.asn.au"><span style="font-size:11.0pt">tech@ucc.asn.au</span></a><span style="font-size:11.0pt"><br>
<br>
Hi Steven,<br>
<br>
The DKIM record is still used and correct, headers of email sent from <br>
UCC are signed with that key.<br>
Without it the email deliverability decreases significantly (ends up in <br>
recipient spam folders instead).<br>
</span><a href="https://www.cloudflare.com/en-gb/learning/email-security/dmarc-dkim-spf/"><span style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cloudflare.com%2Fen-gb%2Flearning%2Femail-security%2Fdmarc-dkim-spf%2F&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894298736%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=P8tZLDZjcZthrPBKI2Th7e1pfGa21eYVF9mWTwvsVkg%3D&reserved=0</span></a><span style="font-size:11.0pt"><br>
<br>
The SPF record for 130.95.0.0/16 covers the current sending address <br>
(130.95.13.30), though could now be limited to just .13/24. We can <br>
remove the ironports, thanks for the reminder.<br>
(We set it to the entirety of UWA at one point because outbound <br>
mailservers were being changed without any notification, so didn't want <br>
to get caught out).<br>
The 203.27.114.0/23 is enabled to allow sending mail from off-site UCC <br>
servers that use .ucc.asn.au subdomains too.<br>
I think smtp-engine.com was an experiment with a 3rd party outbound <br>
provider, that can be removed. We'll get that done<br>
<br>
Cheers,<br>
Matt<br>
<br>
<br>
On 2024-02-12 1:54 pm, Steven Lim wrote:<br>
> Hi UCC<br>
> <br>
> We are trying to get updates on DNS records as per below. Can you<br>
> please provide an update or additional contact information to discuss.<br>
> If we receive no response in the next week or two then we will<br>
> commence removing records we deem as not required, specifically the<br>
> records<br>
> * ucc-2016.3 DKIM records<br>
> *130.95.0.0 entry in the SPF record<br>
> * ip4:139.138.31.0/24 ip4:139.138.42.0/24 IronPort records in the SPF<br>
> record as this system is being decommissioned<br>
> <br>
> Thanks<br>
> <br>
> --<br>
> Steven Lim<br>
> Manager System Administration<br>
> University IT . B658 R206, M463, Perth WA 6009 Australia<br>
> P +61 8 6488 2970 M +61 4 3856 1173 . E </span><a href="mailto:steven.lim@uwa.edu.au"><span style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span style="font-size:11.0pt"> (inc
<br>
> Teams)<br>
> <br>
> <br>
> -----Original Message-----<br>
> From: Steven Lim<br>
> Sent: Thursday, February 1, 2024 9:48 AM<br>
> To: 'James Andrewartha' <</span><a href="mailto:trs80@ucc.gu.uwa.edu.au"><span style="font-size:11.0pt">trs80@ucc.gu.uwa.edu.au</span></a><span style="font-size:11.0pt">><br>
> Cc: 'UCC Wheel Group' <</span><a href="mailto:wheel@ucc.asn.au"><span style="font-size:11.0pt">wheel@ucc.asn.au</span></a><span style="font-size:11.0pt">>; 'tpg@ucc.asn.au'<br>
> <</span><a href="mailto:tpg@ucc.asn.au"><span style="font-size:11.0pt">tpg@ucc.asn.au</span></a><span style="font-size:11.0pt">>; 'tech@ucc.asn.au' <</span><a href="mailto:tech@ucc.asn.au"><span style="font-size:11.0pt">tech@ucc.asn.au</span></a><span style="font-size:11.0pt">><br>
> Subject: UCC SPF\DKIM records<br>
> <br>
> Hi James et al<br>
> <br>
> We're just reviewing DNS records related to SPF\DKIM. We note that the<br>
> UCC have some records in place and we're after additional information.<br>
> The records in question are as follows:<br>
> <br>
> Domain Type Usage Record Value<br>
> Ucc.asn.au TXT DKIM ucc-2016-3._domainkey.ucc.asn.au. v=DKIM1; k=rsa;<br>
> t=y;<br>
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Ucc.gu.uwa.edu.au TXT DKIM ucc-2016-3._domainkey.ucc.gu.uwa.edu.au. v=DKIM1;<br>
> k=rsa; t=y;<br>
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Ucc.guild.uwa.edu.au TXT DKIM ucc-2016-3._domainkey.guild.uwa.edu.au. v=DKIM1;<br>
> k=rsa; t=y;<br>
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5fGQBeHII4Slf0iIguwwuLcbWmHv0JaNyUgubDIevYXpaZQdd5WrBO8sQcTezxbKlovMQFK1T5S1Z4tToWr7+Q6w3enVHkAFyT6qYSONzi4pcK3HKhG2DHwIaFm6csyjDQg0tk7dHgAqdjgQitPn84dbrbAGjJ24mxipdDNsoVQIDAQAB<br>
> <br>
> Each of the domains also has the following SPF record:<br>
> <br>
> v=spf1 ip4:203.27.114.0/23 ip4:130.95.0.0/16 ip4:139.138.31.0/24<br>
> ip4:139.138.42.0/24 include:spf.smtp-engine.com<br>
> include:spf.forwardemail.net ~all<br>
> <br>
> Could you please advise:<br>
> 1. What is the DKIM record ucc-2016-3._domainkey used for? Is it still <br>
> required?<br>
> 2. What are the following SPF records required for and are they still <br>
> required?<br>
> a. ip4:203.27.114.0/23, appears to be your entire network<br>
> b. ip4:130.95.0.0/16, the entire UWA network<br>
> c. ip4:139.138.31.0/24 ip4:139.138.42.0/24 UWA IronPorts, soon to be<br>
> phased out. The first record has already been decommissioned<br>
> d. include:spf.smtp-engine.com, Unknown<br>
> <br>
> If you could get back to me asap.<br>
> <br>
> ta<br>
> --<br>
> Steven Lim<br>
> Manager System Administration<br>
> University IT . B658 R206, M463, Perth WA 6009 Australia P +61 8<br>
> 6488 2970 M +61 4 3856 1173 . E </span><a href="mailto:steven.lim@uwa.edu.au"><span style="font-size:11.0pt">steven.lim@uwa.edu.au</span></a><span style="font-size:11.0pt"> (inc Teams) C<br>
> </span><a href="https://uwa.zoom.us/my/stevenjlim"><span style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fuwa.zoom.us%2Fmy%2Fstevenjlim&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894306315%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=vVsDv%2Fy04JmAr9%2BX1%2FPNsSrFZRFnpxWyO3W2OuGONFI%3D&reserved=0</span></a><span style="font-size:11.0pt"><br>
> <br>
> <br>
_______________________________________________<br>
List Archives: </span><a href="http://lists.ucc.asn.au/pipermail/tech"><span style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.ucc.asn.au%2Fpipermail%2Ftech&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894310947%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=nTQGn2uFBzv8YV2yAzj52wHx%2FT40E8fOXOMQutKlkjg%3D&reserved=0</span></a><span style="font-size:11.0pt"><br>
<br>
Unsubscribe here: </span><a href="https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/22971584%40student.uwa.edu.au"><span style="font-size:11.0pt">https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ucc.gu.uwa.edu.au%2Fmailman%2Foptions%2Ftech%2F22971584%2540student.uwa.edu.au&data=05%7C02%7C22971584%40student.uwa.edu.au%7C38fdf0f64a4544d7a2f108dc2b91361d%7C05894af0cb2846d8871674cdb46e2226%7C0%7C0%7C638433149894315432%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C60000%7C%7C%7C&sdata=1rRlb8agVOXKVYTQTTD3y8NHL1fAbKtHgndwDFJJfmY%3D&reserved=0</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>