Folks,
I compiled exim with libspf ( libspf2-1.2.9 )
I published TXT record for the domain that would deny everything except for
my mailers :
IN TXT "v=spf1 mx a ip4: xxx.xxx.xxx.0/24 ip4:xxx.xxx.xxx.x mx:
my_smarthost.com -all"
In my exim.conf in acl_check_rcpt: I added
# SPF Acl clause
warn set acl_m1 = --ip-address=$sender_host_address
--mfrom=$sender_address --helo=$sender_helo_name
set acl_m1 = ${run{/usr/local/bin/spfquery $acl_m1}{$value}{fail}}
deny message = SPF check fail. $sender_host_address is not allowed to
send mail from $sender_address_domain.
condition = ${if eq {$runrc}{1}{1}{0}}
I tested it from remote system by telneting to my relay and was able to
send email forging from address.
What am I missing here? Any help would be greatly appreciated.
Thank you.
Alex