> https://dane.sys4.de/smtp/gmail.com
> https://dane.sys4.de/smtp/yahoo.com > so why not reject softfail based on it ? > oh yahoo client use gmail, hmm :=) > that user should use smtp auth on gmail, not use yahoo smtp servers for > relaying > and note DNSSEC is not needed to make it worse Sorry, I really don't understand any of that. What relevance are the links to dane.sys4.de, and the rest of the comments? Like I said, I'm asking about 'freemail' detection in SA, why they're not used here, and how to config correctly so I do. Jason