Alex via Postfix-users:
> Hi,
> I'm using postfix-3.8.5 on fedora40 and having a problem with forwarding
> mail from our relay to gmail recipients. We have some users using
> ~/.forward files to individual gmail accounts. Obviously not ideal, but I
> hoped openarc could help alleviate some of those problems.
>
> Aug 3 17:01:48 cipher postfix-gmail/smtp[478730]: 9415A3D59D: host
> gmail-smtp-in.l.google.com[142.251.179.26] said: 421-4.7.26 Your email has
> been rate limited because it is unauthenticated. Gmail 421-4.7.26 requires
> all senders to authenticate with either SPF or DKIM. 421-4.7.26
> 421-4.7.26 Authentication results: 421-4.7.26 DKIM = did not pass
> 421-4.7.26 SPF [clclodging.com] with ip: [209.216.111.60] = did not pass
> 421-4.7.26 421-4.7.26 For instructions on setting up authentication, go
> to 421 4.7.26 https://support.google.com/mail/answer/81126#authentication
> 6a1803df08f44-6bb9c83f500si53204456d6.247 - gsmtp (in reply to end of DATA
> command)
That looks familiar.
> Gmail doesn't recognize the above as a forwarded email, so DKIM and SPF
> fail. Will openarc solve the issue above with authentication failure?
This is a receiver policy: they will severely limit mail that is
forwarded even if the DKIM signature is intact.
On my personal mail server I have a few aliases that forward messages
unmodified to my gmail account, and I can get away with that only
because 1) my own domain's SPF, DKIM and DMARC are squeaky clean
(good server reputation) and 2) I forward very few messages and it
does not work for all email. I forward other messages manually as
a new message with an message/rfc822 attachment.
So, I have no good solution for the forwarding problem.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
