I would like to report incident in which sender have sent two email one of it got tagged "Spam Low" due SPF_PermError but another mail from same user passed SPF check successfully.
Below are the header for passed email
==============
Return-Path: <jdemarco@test.com>
Received: from cal1-mh745b.smtproutes.com (cal1-mh745b.smtproutes.com [208.70.89.155]) by webmail-1.xxx.net with SMTP;
Wed, 24 May 2017 16:10:01 -0400
X-Katharion-ID: 1495656561.23030.cal1-mh745
Return-Path: <JDeMarco@test.com>
Received: from mail.test.com ([74.217.80.5]) by
cal1-mh745.smtproutes.com [(192.69.16.67)] with ESMTP via TCP
(TLSv1/TLS_RSA_WITH_AES_256_CBC_SHA); 24 May 2017 20:09:21 +0000
Received: from ASHVMEXCH01.us.neosys.dom ([::1]) by ASHVMEXCH01.us.neosys.dom
([::1]) with mapi id 14.01.0421.002; Wed, 24 May 2017 16:08:33 -0400
From: Julie DeMarco <JDeMarco@test.com>
To: Kevin Hite <kevin.hite@test1.com>
Subject: NeoSystems updated hosting proposal
Thread-Topic: NeoSystems updated hosting proposal
Thread-Index: AdLUyWCHUpzk+pf6RTyN82SQSOgcwQ==
Date: Wed, 24 May 2017 20:08:32 +0000
Message-ID: <EBB075BC9CDAAE47A0CA27F7DEF84A7101545D24B9@ASHVMEXCH01.us.neosys.dom>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.134.0.206]
Content-Type: multipart/mixed;
boundary="_007_EBB075BC9CDAAE47A0CA27F7DEF84A7101545D24B9ASHVMEXCH01us_"
MIME-Version: 1.0
X-SmarterMail-Spam: SPF_Pass, HostKarma - Whitelist, Commtouch 0 [value: Unknown], DK_None, DKIM_None
X-CTCH-RefId: str=0001.0A020205.5925E8CC.0235:SCFSTAT35232695,ss=1,re=-4.000,recu=0.000,reip=0.000,vtr=str,vl=0,cl=1,cld=1,fgs=0
X-SmarterMail-TotalSpamWeight: 0
==============
Below is the header for failed mail with SPF_PermError
==============
Return-Path: <jdemarco@test.com>
Received: from cal1-mh744b.smtproutes.com (cal1-mh744b.smtproutes.com [208.70.89.150]) by webmail-1.xxxx.net with SMTP;
Thu, 25 May 2017 13:58:02 -0400
X-Katharion-ID: 1495735044.58471.cal1-mh744
Return-Path: <JDeMarco@test.com>
Received: from mail.test.com ([74.217.80.5]) by
cal1-mh744.smtproutes.com [(192.69.16.66)] with ESMTP via TCP
(TLSv1/TLS_RSA_WITH_AES_256_CBC_SHA); 25 May 2017 17:57:24 +0000
Received: from ASHVMEXCH01.us.neosys.dom ([::1]) by ASHVMEXCH01.us.neosys.dom
([::1]) with mapi id 14.01.0421.002; Thu, 25 May 2017 13:56:33 -0400
From: Julie DeMarco <JDeMarco@test.com>
To: Kevin Hite <kevin.hite@test1.com>
Subject: SPAM-LOW: Michael will send you an invite
Thread-Topic: Michael will send you an invite
Thread-Index: AdLVgDlLYWcNSiY2ScOFNWeGz9PWbg==
Date: Thu, 25 May 2017 17:56:32 +0000
Message-ID: <EBB075BC9CDAAE47A0CA27F7DEF84A7101545D3608@ASHVMEXCH01.us.neosys.dom>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.134.0.206]
Content-Type: multipart/related;
boundary="_005_EBB075BC9CDAAE47A0CA27F7DEF84A7101545D3608ASHVMEXCH01us_";
type="multipart/alternative"
MIME-Version: 1.0
X-SmarterMail-Spam: SPF_PermError, HostKarma - Whitelist, Commtouch 0 [value: Unknown], DK_None, DKIM_None
X-CTCH-RefId: str=0001.0A020204.59271B62.013A:SCFSTAT35232695,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-SmarterMail-TotalSpamWeight: 15
==============
Thanks,
Jay