Re: SPF rules and my domain

[Reindl Harald]

Am 10.12.2015 um 15:47 schrieb Alex:

data in spf must be with all mynetworks in postfix except all non routeble
ips such as rfc1918 in the spf for mydestination and virtual domains

Doesn't that introduce a trust issue with include: for example? We're
including constant-contact, salesforce, etc. How are these included in
$mynetworks, and wouldn't that mean inherently trusting all of
constant-contact?

just forget SPF and you are done

smtpd_recipient_restrictions =
 .. all your other restictions
 permit_dnswl_client your-won-rbndsnd instance
 check_sender_access hash:/etc/postfix/spoofing_protection.cf

so you can easily skip constant-contact, salesforc and what not and a local rbldnsd wird to the anyways needed unbound-instance is configured within 5 minutes and *really* protects *your* envelope from get spoofed

signature.asc
Description: OpenPGP digital signature