On 08.07.24 11:42, natan via Postfix-users wrote:
What you propose use ?
Maybe instead of not accepting such mail will better is change
score in SA ?
W dniu 15.07.2024 o 12:06, Matus UHLAR - fantomas via Postfix-users pisze:
This is a policy issue. You can choose your policy to be rejecting
mail with spf=fail, both spf=fail and spf=softfail, or reject any
mail where spf is nof pass or DKIM is not valid as Google set since
new year.
so far I have used sailsafe options to use SPF at SA level:
HELO_reject = False
Mail_From_reject = False
PermError_reject = False
TempError_Defer = True
but I'm switching to SPF enforcement:
HELO_reject = Null
On 19.07.24 09:34, natan via Postfix-users wrote:
Can you get me example reject in Null ?
so far I only have some spf fails, and few permanent errors
Mail_From_reject = Fail
PermError_reject = True
TempError_Defer = True
Another option is to reject DMARC failures, in addition to SPF or as
it's replacement.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
