[SOLVED] PMG rejects forwarded e-mails cause spf failed

[rafalw]

- Sender sends a message from domain : eg. slawek@sender.pl to maria@reciever1.pl (both hosted externally, not in our enviroment)

- The message goes to MTA of reciever1.pl domain to the mailbox maria@reciever.pl

- in the mailbox maria@reciever1.pl a forward is set to to maria@final-reciever.pl)

- The message does not reach maria@final-reciever.pl,
cause:


The e-mail domain final-reciever.pl is behind our PMG cluster (smtp-proxy-2-1.my-proxy.tld is one os our PMGs).

The sender gets reply from sender.pl MTA:


"<maria@final-reciever.pl>: 554 5.7.1 <maria@final-reciever.pl>: Recipient address rejected: Please see http://www.openspf.org/Why?s=mfrom;id=slawek@sender.pl;ip=89.161.156.xx;r=smtp-proxy-2-1.my-proxy.tld "


Question: is there any way to help our customer (user of e-mail accounts in final-reciever.pl domain protected by our PMG) to recieve forwarded messages from external domain reciever.pl? (different than disabling spf of course)?

Feature request: is there a way, to use another "spf explanation link"? - the openspf.org site is down

 

[Stoiko Ivanov]

plain Forwarding is broken when SPF is in place (unless you controll the SPF-records of sender.pl and can add the sending server of reciever1.pl to it (which does not scale)) - https://en.wikipedia.org/wiki/Sender_Policy_Framework#FAIL_and_forwarding

The "proper" solution is to either implement SRS at reciever1.pl or to not forward the mail but resend it (depends on the options of the Provider)

That's been one of the problems of SPF since it's beginnings - but as said workaround do exist

Feature request: is there a way, to use another "spf explanation link"? - the openspf.org site is down

This issue has been raised - https://bugzilla.proxmox.com/show_bug.cgi?id=2224 - subscribe to it for further information.

I hope this helps!

 

[rafalw]

Hi Stoiko, thank you for quick reply.
It's all clear now.

 

[Stoiko Ivanov]

You're welcome!
Please mark the thread as 'SOLVED' so that others know what they can expect.
Thanks!