Sam Varshavchik <[EMAIL PROTECTED]> writes: > Lloyd Zusman writes: > >> And here's some new data: the same sender has recently sent identical >> email to another address on my server. And although SPF fails, the >> messages get properly sent to the courierfilter instead of being >> rejected. HOWEVER, this 417/517 rejection continues to occur when the >> messages are sent to the original recipient. >> So, what's the difference between the two recipient accounts? >> Recipient account 1: >> - SPF fails >> - Message gets sent to courierfilter >> - Account has no local maildrop rules >> Recpient account 2: >> - SPF fails in the same way >> - Message does not get sent to courierfilter, but gets >> rejected with a 417 or 517 error, depending on the >> setting of BOFHSPFHARDERROR >> - Account has local maildrop rules which automatically cause >> messages from this sender to be whitelisted > > This has no effect on SPF. If a message fails SPF checking, it gets > rejected. "Whitelisting", in the context of localmailfilter, only > affects content filtering. It does not affect SPF. > > All messages, whether their content is whitelisted from > content-filtering or not, must still pass SPF checking. > > The only kind of "whitelisting" that applies to SPF checking is the > BOFHSPFTRUSTME setting, which exempts senders with relaying privileges > from SPF checking.
OK. So then how can we explain the difference in behavior between messages going to recipient 1 and recipient 2, as described above? Recall that both of them are getting identical SPF failures, but that one of them properly passes the failed message to the courierfilter (as specified by the three "BOFHSPF*=all" settings), and the other one bounces the message with a 417/517 error. The messages are identical. The senders are identical. The only difference I can find so far is the presence of the localmailfilter in the account of the one that is causing the SPF failures to bounce without feeding them to courierfilter, and the lack of a localmailfilter for the other account. What could I be overlooking? What could be causing this? -- Lloyd Zusman [EMAIL PROTECTED] God bless you. ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
