Ah ha, thank you. That'll be a nice quick fix till they get SPF up on their domain name.
-- Brian Trudeau, Network Administrator Eastek International Corporation 330 Hastings Drive, Buffalo Grove, IL 60089 Tel: (847) 353-8300 Ext. 213 Fax: (847) 353-8900 Web: http://www.eastek-intl.com Email: [EMAIL PROTECTED] -----Original Message----- From: Jake Vickers [mailto:[EMAIL PROTECTED] Sent: Monday, September 26, 2005 9:44 AM To: [email protected] Subject: Re: [qmailtoaster] SPF problems? Brian Trudeau wrote: > I've noticed a lot of Status 256s lately in my SMTP logs, so I > investigated further in to and found these are legit emails coming in > from domains that do not have any SPF record. I used recordio and I > see the emails are getting rejected with this message "451 SPF lookup > failure (#4.3.0)" For some reason this error message doesn't show in > smtp logs, only by using recordio did I find this error message. > > I really need to get this fixed ASAP as this is rejecting emails from > our parent company, and they are not too happy about it. > >-- > >Brian Trudeau, Network Administrator > >Eastek International Corporation > >330 Hastings Drive, Buffalo Grove, IL 60089 > >Tel: (847) 353-8300 Ext. 213 Fax: (847) 353-8900 > >Web: http://www.eastek-intl.com Email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > SPF behavior is controlled in the /var/qmail/control/spfbehavior file, normally. I think it's set up to default use level 3. There was an earlier post about the levels, where Erik posted this: More info available here: http://www.saout.de/misc/spf/ spfbehavior > > > > Use this to turn on SPF checking. The default value is 0 (off). > > > > You can specify a value between 0 and 6: > > > > > > > > * 0: Never do SPF lookups, don't create Received-SPF headers > > > > * 1: Only create Received-SPF headers, never block > > > > * 2: Use temporary errors when you have DNS lookup problems > > > > * 3: Reject mails when SPF resolves to fail (deny) > > > > * 4: Reject mails when SPF resolves to softfail > > > > * 5: Reject mails when SPF resolves to neutral > > > > * 6: Reject mails when SPF does not resolve to pass > > > > > > > > Values bigger than 3 are strongly discouraged, you probably > > > > want to go with 2 or 3. > > > > Important: This setting can be overridden using the > > > > environment variable SPFBEHAVIOR, e.g. from tcpserver rules. > > > > Note: If RELAYCLIENT is set, SPF checks won't run at all. > > > > (This also includes SMTP-AUTH and similar patches) --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
