Brian Trudeau wrote:
I’ve noticed a lot of Status 256s lately in my SMTP logs, so I
investigated further in to and found these are legit emails coming in
from domains that do not have any SPF record. I used recordio and I
see the emails are getting rejected with this message “451 SPF lookup
failure (#4.3.0)” For some reason this error message doesn’t show in
smtp logs, only by using recordio did I find this error message.
I really need to get this fixed ASAP as this is rejecting emails from
our parent company, and they are not too happy about it.
--
Brian Trudeau, Network Administrator
Eastek International Corporation
330 Hastings Drive, Buffalo Grove, IL 60089
Tel: (847) 353-8300 Ext. 213 Fax: (847) 353-8900
Web: http://www.eastek-intl.com Email: [EMAIL PROTECTED] <mailto:[EMAIL
PROTECTED]>
SPF behavior is controlled in the /var/qmail/control/spfbehavior file,
normally. I think it's set up to default use level 3. There was an
earlier post about the levels, where Erik posted this:
More info available here: http://www.saout.de/misc/spf/ spfbehavior
> > > Use this to turn on SPF checking. The default value is 0 (off).
> > > You can specify a value between 0 and 6:
> > >
> > > * 0: Never do SPF lookups, don't create Received-SPF headers
> > > * 1: Only create Received-SPF headers, never block
> > > * 2: Use temporary errors when you have DNS lookup problems
> > > * 3: Reject mails when SPF resolves to fail (deny)
> > > * 4: Reject mails when SPF resolves to softfail
> > > * 5: Reject mails when SPF resolves to neutral
> > > * 6: Reject mails when SPF does not resolve to pass
> > >
> > > Values bigger than 3 are strongly discouraged, you probably
> > > want to go with 2 or 3.
> > > Important: This setting can be overridden using the
> > > environment variable SPFBEHAVIOR, e.g. from tcpserver rules.
> > > Note: If RELAYCLIENT is set, SPF checks won't run at all.
> > > (This also includes SMTP-AUTH and similar patches)
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
