On 16/04/12 23:13, Reindl Harald wrote: >> More importantly, with the -o myhostname=domain1.com they can >> fully pass any hardfail SPF test > > this has nothing to do with the hostname
True from a fail/pass SPF inspection by the remote mailserver but not from a support techie eyeball point of view. > relay is smtp-daemon and "-o smtp_bind_address=" and SPF does not > deal with "-o myhostname" because the only interesting fact here > is that the used sending IP-ADDRESS matches SPF records The myhostname setting changes the "Received: from" and helo= lines below so that a visual inspection does not confuse the issue for anyone who has to diagnose the headers. Received: from domain1.com ([::ffff:12.34.56.78]) Received-SPF: pass (Address passes the Sender Policy Framework) SPF=HELO; sender=domain1.com; remoteip=::ffff:12.34.56.78; remotehost=; helo=domain1.com; receiver=recipientdomain.com;