Setup:
we have the follwong email setup:
- mx records is pointing to our anti-spam filter
- anti-span relays emails to our MTA
- if the user has migrated to our domain at google apps, the MTA
relays the emails to aspmx.l.google.com. Otherwise, it routes it to
our backend mail systems.

Problem:
the google apps email servers (aspmx.l.google.com) see all the email
destinated to our users as originating from our MTA server.

when (aspmx.l.google.com) checks the SPF entry, sometimes, it
discovers that our MTA is not an allowed sender of email message
coming from not our localdoamin, yet routed throug our MTA. e.g.
email sent from [EMAIL PROTECTED] to [EMAIL PROTECTED],
accodrinf to SPF our MTA is not an allowed sender for external-
domain.com.

To solve this problem, we could add our MTA servers in the Email
whitelist field in the Google APPS control panel. BUT this would  make
all the emails originating from MTA be seen as trusted, meanwhile it
could contain spam. the MTA is just relaying emails destinated to our
domain. in such a scenario the google apps anti-spam would be disabled
and spam messages will pass without being checked.

Therfore, i suggest that google apps should have field where we can
put our email relaying hosts. these hosts should be checked for SPAM
and not SPF checked.


One final thing, in the above mentioned setup, the followind SPAM
messages is not detected.
smap messages with the sender address at our local address, because
when they become SPF checked, they are seen as coming from a
legitimate source!

I would like to know, if you are handling such cases in a certian way
or if you have any suggestion to solve this issues.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to