Hi, Would you mind cross posting this to the main Google Apps discussion group?
http://groups.google.com/group/apps-discuss There are a lot of discussions about email gateways in the main group. -alex On Jan 4, 1:55 pm, Marmina ABDEL-MALEK <[EMAIL PROTECTED]> wrote: > Setup: > we have the follwong email setup: > - mx records is pointing to our anti-spam filter > - anti-span relays emails to our MTA > - if the user has migrated to our domain at google apps, the MTA > relays the emails to aspmx.l.google.com. Otherwise, it routes it to > our backend mail systems. > > Problem: > the google apps email servers (aspmx.l.google.com) see all the email > destinated to our users as originating from our MTA server. > > when (aspmx.l.google.com) checks the SPF entry, sometimes, it > discovers that our MTA is not an allowed sender of email message > coming from not our localdoamin, yet routed throug our MTA. e.g. > email sent from [EMAIL PROTECTED] to [EMAIL PROTECTED], > accodrinf to SPF our MTA is not an allowed sender for external- > domain.com. > > To solve this problem, we could add our MTA servers in the Email > whitelist field in the Google APPS control panel. BUT this would make > all the emails originating from MTA be seen as trusted, meanwhile it > could contain spam. the MTA is just relaying emails destinated to our > domain. in such a scenario the google apps anti-spam would be disabled > and spam messages will pass without being checked. > > Therfore, i suggest that google apps should have field where we can > put our email relaying hosts. these hosts should be checked for SPAM > and not SPF checked. > > One final thing, in the above mentioned setup, the followind SPAM > messages is not detected. > smap messages with the sender address at our local address, because > when they become SPF checked, they are seen as coming from a > legitimate source! > > I would like to know, if you are handling such cases in a certian way > or if you have any suggestion to solve this issues. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Apps APIs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-apps-apis?hl=en -~----------~----~----~----~------~----~------~--~---
