On 18/Jan/11 23:09, Mark Constable wrote: > I'm using these SPF related entries in bofh... > > opt BOFHSPFHELO=all > opt BOFHSPFMAILFROM=all > opt BOFHSPFFROM=all,mailfromok > opt BOFHSPFTRUSTME=1 > > where I thought BOFHSPFFROM=all,mailfromok would let through all > or most messages from mailing-lists in general
All, rather than most. BOFHSPFFROM=all is enough to avoid rejecting, but still perform the test and annotate the result in the header. Adding mailfromok should skip the test in case a "pass" has been obtained for MAIL FROM. Another possible setting is BOFHSPFFROM=off. I still have BOFHSPFMAILFROM=pass,none,neutral,softfail,unknown,error i.e. all but fail: if someone manages to serve me a "fail", I honor it. > Jan 19 00:19:59 mail courieresmtpd: error, > relay=::ffff:87.238.50.203, > from=<[email protected]>: > 517 SPF softfail [email protected]: > Address does not pass the Sender Policy Framework > > The qt.nokia.com sub-domain does not have any SPF record at all > but nokia.com does so it seems the From: is overriding the "From ". Yes, "qt-qml-bounces+markc=renta.net" is the VERP token built by the qt-qml list. Since it differs from "[email protected]", you know that the test was done on From:. If qt.nokia.com had an SPF record, then a "pass" on the mailfrom would have triggered a mailfromok setting. For lists with no SPF records mailfromok is not sufficient, thus you need "all" or "off" for BOFHSPFFROM. > Are my opt BOFH* lines just wrong, or any suggestions how to > work around this? The setting you posted are over-conservative. As Sam said, the bounce you report does not result from them. hth -- ------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
