On 2008-08-20, Sam Varshavchik wrote: > > If anyone sends an email to [EMAIL PROTECTED] it > > gets forwarded to said server and results in the same error so it's > > simply not possible to add 203.17.154.25 to "everyones" SPF records. > > The missing piece is that when the mail gets forwarded, the return address > needs to be reset to @jakeman.com.au, and a suitable SPF record needs to be > provided. There's actually some semi-standard documentation floating around > that sets the standard for rewriting return addresses, when forwarding. > However, any address rewriting scheme will work fine.
Wow, I just did a test between 2 courier mailservers and the same problem occurs. I created a simple .courier-test on a neighboring courier mailserver that forwards back to me and sent a test message and, sure enough, it got blocked for the same reason... Aug 21 15:18:23 mail courieresmtpd: error,relay=::ffff:202.6.xxx.xxx, from=<[EMAIL PROTECTED]>: 517 SPF fail [EMAIL PROTECTED]: Address does not pass the Sender Policy Framework so if anyone sends an email to this particular alias then all messages are going to be blocked for the same reason that "everyone elses domain" cannot possibly be added to the 202.6.xxx.xxx (in this case) domains SPF record. I would imagine this is a common functionality, to simply set up a forwarding alias to another email address, but if the destination mailserver happens to use SPF checking then all messages will be blocked. I'm somewhat stunned this has not been more of a noticable problem for anyone using SPF... and that I haven't noticed it myself until now even though we've been using SPF for the past year. Now, I can probably locate that "semi-standard documentation floating around" and make sure my local aliases have rewritten return addresses (presumably) but I can't do anything about other mailservers that I have no control over, as per the original issue illustrated in this thread. Am I reading this right and are there any other solutions aside from disabling and adbandoning the use of SPF altogether ? --markc ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
