Hi all,

Hi I've been reading through the documentation and this mailing list  
to find a solution to the above problem, but have not yet been able  
to find a solution.

Some background: I am hosting some domains on my mail server and for  
these domains I would like to enable strict SPF checking at  
connection time. Unfortunately I have a domain hosted at an external  
provider and I have configured it to forward all mail to my server so  
I won't forget to check it. This of course triggers an SPF MAILFROM  
fail for instance for mail from lists.sourceforge.net relayed through  
my external mailserver.

I have tried to change smtpaccess/default for this based on different  
suggestions on this list, to whitelist the
sending server. But courier seems to do the SPF check no matter what  
I put in the smtpaccess file (I do run makesmtpaccess after updating  
it).

I have tried the following combinations (one at a time :-) )

80.82.99.168    allow,BLOCK
80.82.99.168    allow,BOFHSPFTRUSTME=1,BLOCK
80.82.99.168    allow,BOFHCHECKDNS=0,BLOCK

An example of the Received-SPF headers in the mail

Received-SPF: none (Address does not pass the Sender Policy Framework)
   SPF=HELO;
   sender=smtp.securehosting.dk;
   remoteip=::ffff:80.82.99.168;
   remotehost=smtp.securehosting.dk;
   helo=smtp.securehosting.dk;
   receiver=mail.kristian-duus.dk;
Received-SPF: fail (Address does not pass the Sender Policy Framework)
   SPF=MAILFROM;
   [EMAIL PROTECTED];
   remoteip=::ffff:80.82.99.168;
   remotehost=smtp.securehosting.dk;
   helo=smtp.securehosting.dk;
   receiver=mail.kristian-duus.dk;
Received-SPF: none (Address does not pass the Sender Policy Framework)
   SPF=FROM;
   [EMAIL PROTECTED];
   remoteip=::ffff:80.82.99.168;
   remotehost=smtp.securehosting.dk;
   helo=smtp.securehosting.dk;
   receiver=mail.kristian-duus.dk;

I do realize that courier may simply add the headers and ignore them  
for the whitelisted server. But the first attempt I did with  
allow,BLOCK in smtpaccess and rejecting SPF fails and softfails  
resulted in only getting mail through from domains that did not have  
an SPF record.

Best Regards and thanks in advance
  Kristian Duus Østergaard



_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to