Dotaz: podivné chování openspf

[chinook]

V DNS záznamu mám nastaveno: domena.cz. 86400 IN TXT "v=spf1 mx ip4:81.19.xx.xx/29 ip4:83.167.xxx.xxx ip4:80.188.xxx.xxx -all" Pokud podvrhnu odesilatele a pošlu si email na doménu výše, vše funguje jak má. Email je zahozen. Ale teď prošel podvržený email a nechápu jak to je možné. Tady dávám onen email:

Return-Path: crosscheck56atgmail.com
X-Original-To: poradna@domena.cz
Delivered-To: poradna@domena.cz
Received: from fw.domena.cz (fw.domena.cz [192.168.120.254])
	by blazenka.domena.cz (Postfix) with ESMTP id 3EE6542BF;
	Thu, 11 Oct 2012 15:13:58 +0200 (CEST)
Received: from fw.domena.cz (localhost.localdomain [127.0.0.1])
	by sagator.fw.domena.cz (Postfix) with ESMTP id 770566EFAE;
	Thu, 11 Oct 2012 15:13:56 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on fw.domena.cz
X-Spam-Level: *****
X-Spam-Status: No, score=5.5 required=8.5 tests=BAYES_50,HTML_MESSAGE,
	HTML_TAG_BALANCE_BODY,MIME_HTML_ONLY,RCVD_IN_XBL,SPF_NEUTRAL autolearn=no
	version=3.3.1
X-Sagator-Scanner: 1.1.0-1 at fw.domena.cz;
	log(status(report(drop(quarantine(const()-max_file_size()&clamd())))), status(drop(quarantine(SpamAssassinD()))))
X-Sagator-ID: 20121011-151356-0001-22808-EMBlWN@fw.domena.cz
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received-SPF: neutral (gmail.com ... _spf.google.com: Domain does not state whether sender is authorized to use 'crosscheck56atgmail.com' in 'mfrom' identity (mechanism '?all' matched)) receiver=fw.domena.cz; identity=mailfrom; envelope-from="crosscheck56atgmail.com"; helo=host3-246-static.42-88-b.business.telecomitalia.it; client-ip=88.42.246.3
Received: from host3-246-static.42-88-b.business.telecomitalia.it (host3-246-static.42-88-b.business.telecomitalia.it [88.42.246.3])
	by fw.domena.cz (Postfix) with ESMTP id 1F5F46EFA4;
	Thu, 11 Oct 2012 15:13:56 +0200 (CEST)
Date: Thu, 11 Oct 2012 14:20:22 +0100
From: michal@domena.cz,
	hana@domena.cz,
	vena.odbyt@domena.cz,
	xxxx@domena.cz,
	xxxxx@domena.cz,
	zaplik@domena.cz,
	dtp@domena.cz,
	poradna@domena.cz,
	spravce@domena.cz,
	martin.j@domena.cz,
	xxxx@domena.cz,
	kob@domena.cz
Cc: enk@domena.cz,
	radek.xxxx@domena.cz,
	it@domena.cz,
	pravnik@domena.cz,
	xxxxx@domena.cz
To: mical@domena.cz,
	hana@domena.cz,
	vena.odbyt@domena.cz,
	golal@domena.cz,
	xxxxxx@domena.cz,
	xxxxx@domena.cz,
	dtp@domena.cz,
	poradna@domena.cz,
	spravce@domena.cz,
	martin.j@domena.cz,
	xxxxxx@domena.cz,
	kob@domena.cz
Cc: enk@domena.cz,
	radek.xxxxxx@domena.cz,
	it@domena.cz,
	pravnik@domena.cz,
	xxxxx@domena.cz
Subject: Vase platba v ramci CSOBu nemuze byt dokonCena
X-Mailer: rbrbtsnuc
MIME-Version: 1.0
Content-Type: text/html;
	charset=unicode
Content-Transfer-Encoding: 7bit
Message-Id: <20121011131356.1F5F46EFA4@fw.domena.cz>


META content="text/html; charset=unicode" http-equiv=Content-Type>


Vážený kliente,

obrací se na Vás služba zpracování plateb ČSOB.



Vaše žádost o provedení platby byla přijata, ale bohužel nemá ČSOB v současné době možnost ji zpracovat.

Důvod – nesprávné údaje v platebním příkazu.

Prosím, zkontrolujte údaje v podané žádosti.



Do té doby, než budou údaje opraveny, se budou finanční prostředky nacházet ve «zmrazeném» stavu.

Po opravení údajů v platebním příkazu budou finanční prostředky odeslány do 10 minut.



S úctou

Služba zpracování plateb ČSOB 

Neví někdo, co je špatně? Z mně neznámého důvodu to zkontrolovalo pouze skutečného odesilatele :(

Odpovědi

[Pindal]

Nic není špatně, je to v pořádku.