On 5 May 2016, at 22:24, Bill Cole wrote: [ blah blah blah ]
OR: I was entirely wrong about the broken SPF records being the cause of that rejection.
Noel & Christian were right in pointing you at the access maps. You MIGHT also run into the SPF issue after exempting that sender from the shunning of their DNS provider, depending on how you do it, but that is dependent on how your policyd-spf responds in the case of bad records.
