"SPF no-mail record" clashing with reject_unknown_recipient_domain

2019-10-28 Thread Ehlers, Y.W. (Ydo)
Dear postfix users, admins and guru's. Today I was alerted to a new 'problem'. As I was unable to find any information on it online, I decided to present it to you.. An important application we run has, unfortunately, an internal mail-queuing system that is, to say the least, sub-optimal. A t

Re: "SPF no-mail record" clashing with reject_unknown_recipient_domain

2019-10-28 Thread Wietse Venema
Ehlers, Y.W. (Ydo): > This usage of a single SPF record results in an existing domain from > Postfix's? perspective. Nope. It has nothing to do with SPF. Instead, it's a borked DNS server. reject_unknown_sender/recipient_domain looks for MX, A, and records (if compiled with IPv6 support). W

Re: "SPF no-mail record" clashing with reject_unknown_recipient_domain

2019-10-28 Thread Ehlers, Y.W. (Ydo)
Wietse, you're absolutely right. I thought I checked my findings correctly, but I missed this one. I'll direct my attention to my networking colleagues for a properly configured DNS server. Ydo Ehlers On 28-10-2019 12:11, Wietse Venema wrote: > Ehlers, Y.W. (Ydo): >> This usage of a single

Re: "SPF no-mail record" clashing with reject_unknown_recipient_domain

2019-10-28 Thread A. Schulze
Ehlers, Y.W. (Ydo): There is no MX record, there is no A record, so mail can not be delivered. And Microsoft tops it off by explicitely claiming no e-mail will be send from this domain for the record: one like to use RFC 7505 to express "this domain don't send / receive email" adding an