On Mon, Sep 14, 2009 at 12:40:08PM -0500, Noel Jones wrote:
>> The problem is that I sometimes have (quite often in fact) rejected mail
>> because they are using spf and the mail is transfered from my backup MX
>> to my master server and my server is considering that second server as
>> the issuer.
>
> Add your secondary MX to mynetworks.
Generally, "mynetworks" also grants "relay" rights, which violates least
privilege. So I would use a separate "whitelist" that is invoked just
after "reject_unauth_destination" and before other (e.g. SPF) checks.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
