About SPF

[jcarmona]

Hi there

We are running Proxmox Mailgateway 1.3 with SPF check active. That server is getting mail from a remote relay and we are in doubt if that configuration make that some emails, those the domain has an SPF entry, are rejected because the name and/or IP of the 'sender' server is our external relay, not the specified in the SPF entries.

Please, could you help us in order to solve this doubt?

Thanks in advance,

Juan Carmona

 

[michael pilz]

Hi Juan
To solve this doubt, put your external relay in the greylisting exclusion list.
If you do so the external relay will not be checked(SPF is part of our Greylisting)!
Best regards, Michael Pilz

Hi there

We are running Proxmox Mailgateway 1.3 with SPF check active. That server is getting mail from a remote relay and we are in doubt if that configuration make that some emails, those the domain has an SPF entry, are rejected because the name and/or IP of the 'sender' server is our external relay, not the specified in the SPF entries.

Please, could you help us in order to solve this doubt?

Thanks in advance,

Juan Carmona

 

[jcarmona]

Hello Michael

But if we do that the SPF check will remain active and effective?

Thanks in advance,

Juan Carmona

 

[michael pilz]

Hi Juan
If you add a host in the greylisting exclusion list no spf check will be done on mails from this ip address. Mails from other hosts will be checked!
I am not sure about your configuration, do you get all mails via this remote relay ?
Best regards, Michael Pilz

Hello Michael

But if we do that the SPF check will remain active and effective?

Thanks in advance,

Juan Carmona

 

[jcarmona]

Hi Michael

Yes, all the external mail comes from only ones host, our external relay.

Best regards,

Juan Carmona

 

[ofanz]

Your configuration makes greylisting totally useless. If all external mail comes from only one host its best to turn off greylisting.

Thought, a better solution would be to send mails directly to proxmox (not using the external relay). That way greylisting works.

Or does the external relay already use greylisting?

- Otto

 

[dietmar]

But if we do that the SPF check will remain active and effective?

SPF is used inside greylisting to avoid unnecessary delays and to reject mails.

Additinally SPF is used inside Spamassassin, so the SPAM level is increased if the SPF check fails.

- Dietmar