Re: FreeBSD mail forwarder and SPF

2007-12-10 Thread Mark D. Foster
Dan Mahoney, System Admin wrote:
 Hello all,

 I secure my outbound e-mail with SPF.  One of the ports maintainers
 ([EMAIL PROTECTED]) also secures his INBOUND e-mail with SPF.

 I tried to e-mail garga about a minor doc-bug, and got a bounce, since
 his mailserver didn't recognize mx2.freebsd.org as a valid MX for
 [EMAIL PROTECTED]

The solution is @ http://www.openspf.org/FAQ/Forwarding
If garga@ isn't following the recommended practice of whitelisting
freebsd.org's MX servers then breakage results. That said,
mx2.freebsd.org is NOT LISTED as an MX of freebsd.org, so maybe that is
contributing to the problem.

-- 
Said one park ranger, 'There is considerable overlap between the 
 intelligence of the smartest bears and the dumbest tourists.'
Mark D. Foster, CISSP [EMAIL PROTECTED]  http://mark.foster.cc/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD mail forwarder and SPF

2007-12-10 Thread Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark D. Foster
Sent: dinsdag 11 december 2007 0:40
To: Dan Mahoney, System Admin
Cc: [EMAIL PROTECTED]
Subject: Re: FreeBSD mail forwarder and SPF

 The solution is @ http://www.openspf.org/FAQ/Forwarding
 If garga@ isn't following the recommended practice of whitelisting
 freebsd.org's MX servers then breakage results. That said,
 mx2.freebsd.org is NOT LISTED as an MX of freebsd.org, so maybe that
 is contributing to the problem.

Like you said, if he wants to send mail through the FreeBSD server, using
his prime.gushi.org domain, he should add ip4:69.147.83.53 to his SPF
records for that domain (or do some SRS forward rewriting).

But what's mx2.freebsd.org not being listed as an MX of freebsd.org got to
do with SPF?? There's no requirement, whatsoever, for mx2.freebsd.org to be
an official FreeBSD MX record. Who cares? FreeBSD includes
ip4:69.147.83.53 in its SPF records (which is mx2.freebsd.org). That's all
SPF needs to know.

- Mark



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD mail forwarder and SPF

2007-12-10 Thread RW
On Mon, 10 Dec 2007 15:28:15 -0800
Mark D. Foster [EMAIL PROTECTED] wrote:


 The solution is @ http://www.openspf.org/FAQ/Forwarding
 If garga@ isn't following the recommended practice of whitelisting
 freebsd.org's MX servers then breakage results. That said,
 mx2.freebsd.org is NOT LISTED as an MX of freebsd.org, so maybe that
 is contributing to the problem.
 


SPF doesn't care whether email is sent from an MX server.

mx2.freebsd.org is listed in the SPF record, but that doesn't really
matter much unless they implement the Sender Rewriting Scheme in
their forwarder. SRS should eliminate the rejection problem.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]