SPF works well in the receipt phase if domain.com is in the group spfenabled. So in the example below my spf in rcpt phase the SPF give back the proper error and blocks the email if it comes from a mail server not in the SPF record. Result of SPF check spf = softfail : failSPF result is softfail (4) ACL in RCPT phasedrop sender_domains = +spfenabled spf = softfail : fail logwrite = SPFRCPTFAIL - $spf_header_comment Examplehelo testermail from: <[email protected]>rcpt to: <[email protected]>data
but in the this scenario it fails. So i would like to be able to test the "From:" against SPF as well. It looks like it is working but it gives back a neutral response which is wrong. Examplehelo testermail from: <[email protected]>rcpt to: <[email protected]>dataFrom:<[email protected]> ACL in DATA phasedrop condition = ${if match_domain{${domain:${address:$h_from:}}}{+spfenabled}} spf = softfail : fail logwrite = SPFDATAFAIL - $spf_header_comment processing "deny"domain.com in "lsearch;/etc/exim/config/spfblocklist"? yes (matched "lsearch;/etc/exim/config/spfblocklist")domain.com in "+spfenabled"? yes (matched "+spfenabled")check condition = ${if match_domain{${domain:${address:$h_from:}}}{+spfenabled}} = truecheck spf = softfail : failSPF result is neutral (1) I would like the SPF to work in the DATA phase as well. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
