otto.cooper skrev den 2025-12-12 21:18:
envelope_sender_header X-Envelope-From
should be good with Return-Path with is default postfix
always_trust_envelope_sender 1
loadplugin Mail::SpamAssassin::Plugin::SPF
is in some kind of pre file right ? :=)
if its now in cf file it could break fucktionalty
spf_timeout 5
ignore_received_spf_header 0
this could be 1, so it does not use forged results
use_newest_received_spf_header 0
also a risk of forged results
When running the debugger, this is what I see.
[...] dbg: message: X-Envelope-From header found after 1 or more
Received lines, cannot trust envelope-from
[...] dbg: spf: EnvelopeFrom not found in first external Received
header
[...] dbg: spf: EnvelopeFrom header not found
[...] dbg: spf: cannot get EnvelopeFrom, cannot use SPF by DNS
The test.eml contains a single Received-SPF.
What is the problem?
perldoc Mail::SpamAssassin::Conf, i think you miss to configure
trusted_networks, internal_networks, msa_networks
it have to know ALL your wan ips
if not defined then spf plugin does not know what to trust
