On 2008-08-20, Sam Varshavchik wrote: > > This is the result of me sending a test message to [EMAIL PROTECTED] > > > > Aug 20 11:29:02 mail courieresmtpd: started,ip=[::ffff:203.17.154.25] > > Aug 20 11:29:06 mail courierd: newmsg,id=000BB289.48AB7361.00004973: > > dns; m0.velocity.net.au (mail.velocitynet.com.au [::ffff:203.17.154.25]) > > Aug 20 11:29:08 mail courieresmtpd: started,ip=[::ffff:203.17.154.25] > > > > Aug 20 11:29:16 mail courieresmtpd: error,relay=::ffff:203.17.154.25, > > from=<[EMAIL PROTECTED]>: 517 SPF fail [EMAIL PROTECTED]: > > Address does not pass the Sender Policy Framework > > > > As mentioned, I thought a BOFHSPFFROM=mailfromok would cover this > > situation so can anyone suggest what might be going on here ? > > mailfromok means that if the SMTP MAIL FROM: address passes SPF, the From: > header is not checked. This settings helps SPF work with mailing lists. If a > mailing list has its own SPF record, and the list messages carry the mailing > list's return address, its valid SPF record validates list messages from > senders who have their own SPF records. lists.sourceforge.net has its own > SPF record. My mail sent to this list will pass SPF checking even though my > domain's SPF record does not include lists.sourceforge.net's IPs.
Yep, I think I understand that, thanks. > renta.net's SPF record does not seem to include 203.17.154.25, so mailfromok > is not in effect. But renta.net's SPF should not have anything to do with 203.17.154.25 as this situation is analogous to a mailing-list at lists.sf.net (kind of). I'm sending an email to [EMAIL PROTECTED] which has a forward back to a user@ on a server I maintain, and the error above is that return email. If anyone sends an email to [EMAIL PROTECTED] it gets forwarded to said server and results in the same error so it's simply not possible to add 203.17.154.25 to "everyones" SPF records. I understand if I added that IP to renta.net's SPF record then it would most likely work, but only for me in this case, but I can't do that for other people sending to [EMAIL PROTECTED] Mail sent directly from [EMAIL PROTECTED] to our server works okay, now that they have updated their jakeman.com.au SPF record. FWIW, the remote server is "220 m0.velocity.net.au ESMTP Postfix" (I thought it may have perhaps been some dud windows exchange server) --markc ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
