AW: SPF reject von Outlook und Hotmail

[Daniel]

Huhu,

da bisher sonst keine Testmail kam, hab ich mir fix nen Fake Konto erstellt.

Der Anfang sieht ok aus im recht langen header mit pass, aber zum Ende hin nicht, und wieder die 25er IP.

Gruß Daniel

Return-Path: <hallo123test456 at outlook.de>
X-Original-To: daniel at ist-immer-online.de
Delivered-To: daniel at ist-immer-online.de
Received-SPF: pass (outlook.de: Sender is authorized to use 'hallo123test456 at outlook.de' in 'mfrom' identity (mechanism
'include:spf-a.hotmail.com' matched)) receiver=Server; identity=mailfrom; envelope-from="hallo123test456 at outlook.de";
helo=BAY004-OMC1S22.hotmail.com; client-ip=65.54.190.33
Authentication-Results: server.ist-immer-online.de; dmarc=none header.from=outlook.de
Received: from BAY004-OMC1S22.hotmail.com (bay004-omc1s22.hotmail.com [65.54.190.33])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
	(Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK))
	by server.ist-immer-online.de (Postfix) with ESMTPS id 952FA3316001
	for <daniel at ist-immer-online.de>; Sun, 26 Jun 2016 21:14:40 +0200 (CEST)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com ([65.54.190.59]) by BAY004-OMC1S22.hotmail.com over TLS secured channel
with Microsoft SMTPSVC(7.5.7601.23008);
	 Sun, 26 Jun 2016 12:14:37 -0700
Received: from HE1EUR01FT022.eop-EUR01.prod.protection.outlook.com
 (10.152.0.60) by HE1EUR01HT092.eop-EUR01.prod.protection.outlook.com
 (10.152.0.224) with Microsoft SMTP Server (TLS) id 15.1.517.7; Sun, 26 Jun
 2016 19:14:34 +0000
Received: from AM4PR07MB1586.eurprd07.prod.outlook.com (10.152.0.54) by
 HE1EUR01FT022.mail.protection.outlook.com (10.152.0.165) with Microsoft SMTP
 Server (TLS) id 15.1.523.9 via Frontend Transport; Sun, 26 Jun 2016 19:14:34
 +0000
Received: from AM4PR07MB1586.eurprd07.prod.outlook.com ([10.165.249.18]) by
 AM4PR07MB1586.eurprd07.prod.outlook.com ([10.165.249.18]) with mapi id
 15.01.0523.019; Sun, 26 Jun 2016 19:14:33 +0000
From: Fake Fake <hallo123test456 at outlook.de>
To: "daniel at ist-immer-online.de" <daniel at ist-immer-online.de>
Subject: testmail
Thread-Topic: testmail
Thread-Index: AQHRz9742IMJJVfq1EeVVa1HG+UziQ==
Date: Sun, 26 Jun 2016 19:14:33 +0000
Message-ID: <AM4PR07MB15861D88EFEC394E85EE4C65CB200 at AM4PR07MB1586.eurprd07.prod.outlook.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: spf=softfail (sender IP is 25.152.0.54)
 smtp.mailfrom=outlook.de; ist-immer-online.de; dkim=none (message not signed)
 header.d=none;ist-immer-online.de; dmarc=none action=none
 header.from=outlook.de;
received-spf: SoftFail (protection.outlook.com: domain of transitioning
 outlook.de discourages use of 25.152.0.54 as permitted sender)
x-tmn: [INyttcAZUANGxxnv7RdWknG4H6h6b/4p]
x-eopattributedmessage: 0
x-forefront-antispam-report:
CIP:25.152.0.54;IPV:NLI;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)(98900003);DIR:OUT;SFP:1102;SCL:1;SRVR:HE1EUR01HT092;H:AM4PR07MB1586.
eurprd07.prod.outlook.com;FPR:;SPF:None;CAT:NONE;LANG:de;CAT:NONE;
x-ms-office365-filtering-correlation-id: 42a82777-d271-44eb-7c89-08d39df61b81
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(1601124038)(5061506196)(5061507196)(1603103041)(1601125047);SRVR:HE1EUR01HT092;
x-exchange-antispam-report-cfa-test:
BCL:0;PCL:0;RULEID:(432015012)(102415321)(82015046);SRVR:HE1EUR01HT092;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR01HT092;
x-forefront-prvs: 0985DA2459
Content-Type: multipart/related;
	boundary="_004_AM4PR07MB15861D88EFEC394E85EE4C65CB200AM4PR07MB1586eurp_";
	type="multipart/alternative"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jun 2016 19:14:33.6206
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT092
Return-Path: hallo123test456 at outlook.de
X-OriginalArrivalTime: 26 Jun 2016 19:14:37.0656 (UTC) FILETIME=[FB516580:01D1CFDE]
X-MailScanner-ID: 952FA3316001.AC4A0
X-MailScanner: Found to be clean
X-MailScanner-SpamScore: s
X-MailScanner-From: hallo123test456 at outlook.de
X-Spam-Status: No

root:~# nslookup -q=txt protection.outlook.com
Non-authoritative answer:
protection.outlook.com  text = "v=spf1 include:spf.protection.outlook.com -all"
Authoritative answers can be found from:

root:~# nslookup -q=txt protection.outlook.de
Non-authoritative answer:
*** Can't find protection.outlook.de: No answer
Authoritative answers can be found from:
protection.outlook.de
        origin = hostmaster.protection.outlook.com
        mail addr = hostmaster.protection.outlook.com
        serial = 2016020894
        refresh = 10800
        retry = 3600
        expire = 604800
        minimum = 300