Yes, understood. This was always about my own MTA receiving a message
appearing to be "FROM" my own domain, and my own SPF record would be
used to check the IP of the remote system to determine if it was
permitted. I may have made that especially clear at one point.
Does this make sense now? I'm trying to use my SPF record to verify
mail FROM our domain being received by our MX is not spoofed.
Right, that was understood.
My response was based on how you worded your question, which has been
removed from the thread now:
> > Please help me understand why SPF_FAIL would not be triggered when > >
> > an incoming email using my domain is received by a server that is > > not in
> > my SPF record.
The SPF fail SHOULD be triggered in that case. But in your first mail you
have mentioned T_SPF_PERMERROR hits instead and later you have denied it...
it's hard to explain why it does not work if you don't provide proper info.
I was addressing the apparent assumption within that question that the
recipient MTA matters to SPF validation.
On 09.12.15 21:42, Alex wrote:
I'm not sure if there's a question there, or I'm still confused. It
matters because the recipient MTA is my own.
Spamassassin is just going to record a generic SPF_FAIL, regardless of
whether it's my SPF record or an email from some other domain.
If I wanted to use SPF in spamassassin to block spoofing attempts
against my domain, how would I do that?
If anyone tried to send mail _to_ your MTA spoofing _your_ domain from
_remote_ (not your) IP that is apparently _not_ part of your domain's SPF
recors, your MTA will refuse the mail as SPF_FAIL.
That's exactly what you want, isn't it?
The problem you may encounter is just the opposite: legitimate clients using
your MTA should not be refused. However they should use SMTP Authentication
and that should be prevented from SPF checks.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Quantum mechanics: The dreams stuff is made of.
