On 2017-06-05 13:32:59 (-0700), Autumn Tyr-Salvia <[email protected]> wrote:
A customer of mine is trying to get DMARC set up on a given domain, and
has set up aligned SPF on their corporate mail server. Unfortunately,
we're seeing an issue, and I'm looking for advice on a resolution.
When someone sets up an out of office autoresponder on the corporate
mail server, those messages are not configured to use a return-path
address. My understanding is that this is the RFC-correct way to do
that.
Unfortunately, when you do that, SPF evaluation then defaults to the
HELO domain. Since this customer is using a hosted email service
provider, the HELO domain belongs to their email provider and not them,
which in turn kills their alignment. Thus, DMARC failures on all
autoresponders.
Thoughts on the best resolution for something like this?
Put the mail provider's HELO names in your SPF record? The SPF record
should list all the mail servers that send mail on behalf of a domain.
Philip
--
Philip Paeps
Senior Reality Engineer
Ministry of Information
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
