SPF macros

[D.5.]

Hi!

Today we received an email from 143.55.144.8 and the sender's domain was danone.com. The email ended up in SPAM, the reason was:

X-KLMS-AntiSpam-Auth: dmarc=pass header.from=danone.com policy=none;spf=permerror smtp.mailfrom=danone.com;dkim=pass header.d=danone.com

The SPF record is:

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

The MX toolbox says it's fine:

https://mxtoolbox.com/SuperTool.aspx?action=spf%3adanone.com%3a143.55.144.8&run=toolpage

But other tools say it is wrong:

https://www.spf-record.com/spf-lookup/danone.com?ip=143.55.144.8
 

Is it possible that KLMS does not support any of these SPF macros?

KLMS Version: 8.0.3.30

Thanks!

[JL - KL DACH]

Hello,

for further analysis please open a case here: https://CompanyAccount.kaspersky.com  

If possible to reproduce the problem provide logs as described here:

https://support.kaspersky.com/klms8/diagnostics/9099

In addition collect system information as described here:

https://support.kaspersky.com/klms8/diagnostics/15732

Thank you in advance

Best Regards