On Thu, March 20, 2008 16:48, Enrico Scholz wrote:

> ok; fixed it by removing the 192.168.0.0/16 from
> 'internal_networks'.  But problem still persists that senders
> from the private 192.168.0.0/16 network are tagged with SPF_FAIL.

if you have nic cards that are open to the air with that ip range you should
not trust them, but this is very uncommon to have non routeble ip as wan ip
:-)

if you want strict checking do 192.168.3.0/24 that will still not cover when
one sends mails from 192.168.0.0/16 mta headers as internal

internal and trusted should be all ips you have access to but not open to the
whole world


Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098

Reply via email to