Re: [exim] Alias to external server and SPF failure

Top Page
Delete this message
Reply to this message
Author: W B Hacker
Date:  
To: exim users
Subject: Re: [exim] Alias to external server and SPF failure
Martin Nicholas wrote:
> It's important to note that it is not the recipient servers "fault" for
> rejecting hard (the record contains: "-all") SPF failures. It's the "SENDER
> Policy Framework" - in other words the receiving server is rejecting mail as
> required by the sender's policy (misconfigurations notwithstanding). It's the
> duty of any good mail admin to do so IMHO.
>
> The solution is to use SRS, as previously described. Don't do this unless the
> message in question passes your own SPF tests. If you don't make these checks
> then you need to, as otherwise you'll SRS-up all sorts of rubbish (and
> possibly generating backscatter from your server). Don't use SRS where the
> SPF record contains "+all". Good also to set up a domain (and SPF record)
> explicitly for the purpose.
>
>


Stone me for an ignorant heathen, but what could possibly be wrong with ignoring
BOTH SPF and SRS altogether?

And that is not in jest. I'm serious.

Bill Hacker