Bounces are sent with the null envelope.from address which has no domain. Therefore, SPF applies policy to a surrogate: the hostname in the SMTP client's HELO/EHLO command (as if the envelope.from address was postmaster@helo-argument).
This helo-argument is by default the value of the Postfix myhostname parameter, which depending on myorigin setting may appear in the header.from address mailer-daemon@whatever. DMARC wants that the dmain in envelope.from address (or its surrogate in the case of <>) in some way align with the domain in the header.from address (in this case mailer-daemon@whatever). If someone can come up with a simple checklist for how to do this then that would be great. Wietse _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org