Re: [exim] Alias to external server and SPF failure

Top Page
Delete this message
Reply to this message
Author: Martin Nicholas
Date:  
To: exim-users
Subject: Re: [exim] Alias to external server and SPF failure
It's important to note that it is not the recipient servers "fault" for
rejecting hard (the record contains: "-all") SPF failures. It's the "SENDER
Policy Framework" - in other words the receiving server is rejecting mail as
required by the sender's policy (misconfigurations notwithstanding). It's the
duty of any good mail admin to do so IMHO.

The solution is to use SRS, as previously described. Don't do this unless the
message in question passes your own SPF tests. If you don't make these checks
then you need to, as otherwise you'll SRS-up all sorts of rubbish (and
possibly generating backscatter from your server). Don't use SRS where the
SPF record contains "+all". Good also to set up a domain (and SPF record)
explicitly for the purpose.