Questions about SPF

[gilton.lima]

Dear, good afternoon! okay?

I use Option, Configuration>Mail Proxy>Options>Use SPF (Yes).

I noticed that it validates the SPF IP address of the domain specified in the "Return-Path:" field.

For this reason he ended up receiving some fake emails. I would like to validate the domain SPF of the Mail from: or from: field, as it is done in the exchange antispam, is this possible?
I also end up receiving emails from domains in the from field that don't exist.


Below is how the SPF in exchange works today



Thanks

 

[Stoiko Ivanov]

I noticed that it validates the SPF IP address of the domain specified in the "Return-Path:" field.

The Return-path field contains the address issued in the MAIL FROM command issued during the SMTP dialogue - thus this is in line with the documentation you posted as picture.

SPF works on envelope addresses and not the ones in the mail headers

I hope this explains it!

 

[gilton.lima]

Some spammers use the mail from field to send email from domains that don't exist.

Our old AntiSpam validated the SPF of this field that is displayed
Example: