Hi,

I observed some strange behaviour with our courier server when it comes
to SPF checks. I think this particular SPF check should not fail, but
perhaps I am wrong, please enlighten me:


Courier is configured to do SPF check in this way:

BOFHSPFMAILFROM=pass,none,unknown,softfail,neutral

To me that means that courier checks during the "MAIL FROM" command the
sender domain and it should fail only if the "-all" statement is used in
the SPF record.

Now I see in the maillog problem with mails coming from osb.org . Mails
are temporarly rejected with a "417 DNS MX lookup failed" error.

The SPF record for osb.org is

---
"v=spf1 mx mx:smtpcluster.computing.csbsju.edu ip4:152.65.184.22
ip4:152.65.184.23 ip4:152.65.184.40 ip4:152.65.184.46 ip4:152.65.184.52
ip4:152.65.184.137 ~all"
---

Well for me with this configuratin any SPF check on osb.org should never
fail, but only generate some additional SPF headers in the mail, even
with corrupted SPF records or non-resolving MX addresses.


-- 
Georg


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to