On 22/07/2010, at 4:04 PM, Regan Murphy wrote:
This line from the rejection: "210.48.108.215 is not allowed to send mail from oasystems.co.nz" is saying the host grunge.hosts.net.nz is not allowed to send email on behalf of oasystems.co.nz which is correct, it's not.
So SPF is behaving as intended: a host is sending mail on behalf of a domain which is not listed in that domain’s SPF record, so the mail is being rejected. To change this, you could either update the SPF record to include that host, or stop that host from sending mail for the domain. Although many SPF failures are due to sender misconfiguration, this can also happen due to a misconfiguration on the receiver’s part. Looking at your original message again, the headers would suggest that this might be the case here; the receiver might not be checking SPF at the border, but rather one or more mail hops further inside their network. See the first item at http://www.openspf.org/FAQ/Common_receiver_mistakes -jasper