whitelist ip to pass SPF

[killmasta93]

HI
I was if someone could shed some light,
currently someone sends an email though mailgun which does not have the correct SPF which the filter blocks it
i wanted to be sure if adding to the whitelist but in the mail proxy section adding the IP would it work?

Thank you

May 26 19:58:32 mail postfix/smtpd[24225]: connect from m228-11.mailgun.net[159.135.228.11]
May 26 19:58:32 mail postfix/smtpd[24225]: Anonymous TLS connection established from m228-11.mailgun.net[159.135.228.11]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
May 26 19:58:33 mail postfix/smtpd[24225]: NOQUEUE: reject: RCPT from m228-11.mailgun.net[159.135.228.11]: 554 5.7.1 <myemail@mydomain.com>: Recipient address rejected: Rejected by SPF: 159.135.228.11 is not a designated mailserver for bounce%40isiigo.com (context mfrom, on mail.domain.com); from=<bounce+50aeab.8354ce-email=domain.com@isiigo.com> to=<myemail@domain.com> proto=ESMTP helo=<m228-11.mailgun.net>
May 26 19:58:33 mail postfix/smtpd[24225]: disconnect from m228-11.mailgun.net[159.135.228.11] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6

 

[Stoiko Ivanov]

i wanted to be sure if adding to the whitelist but in the mail proxy section adding the IP would it work?

yes - you need to add the IP or network here - the domain entries are matched against the envelop-sender and not the sending host

 

[killmasta93]

Thanks for the reply, so add the IP instead of the smtp server? something like this?

 

[Stoiko Ivanov]

Yes - try it and keep an eye on the logs