All mails from symantec.com goes into my spamfilter, as the SPF record set up by Symantec for symantec.com lists the mails as beeing spoofed.
When companies don't know how to handle SPF records, they should delete the SPF record. But I would supposed Symantec knows enough about the Internet and e-mail to keep their SPF record updated.
It is not difficult, just requires somebody to do their job.
I have been receiving mails from:
cs-orders@symantec.com / autoreply@symantec.com / nortoncommunity@symantec.com
from the 3 ip addresses listed below.
69.58.183.55
8.20.172.130
208.74.204.5
Here some lookups as proof that the IP addresse are missing:
symantec.com text = "v=spf1 include:spf.symantec.com ip4:207.38.45.154 include:spf.messagelabs.com ~all"
SPF.symantec.com text = "v=spf1 ip4:216.10.194.28 ip4:216.10.194.135 ip4:202.75.191.8 ip4:216.10.195.241 ip4:216.10.195.242 ip4:216.10.195.243 ip4:166.98.1.209 ip4:166.98.1.210 ~all"
SPF.messagelabs.comtext = "v=spf1 exists:%{ir}.nets.messagelabs.com"
** server can't find 55.183.58.69.nets.messagelabs.com: NXDOMAIN
** server can't find 130.172.20.8.nets.messagelabs.com: NXDOMAIN
** server can't find 5.204.74.208.nets.messagelabs.com: NXDOMAIN