On Sun, May 17, 2015 at 04:12:40AM +0200, aleph de wrote: > I'm receiving mail for a domain at a Postfix server on my VPS's static IP, > then forwarding it to a Postfix server on my office lan. > > I've switched to connecting to the office lan's server @ an internal IP > address (192.168.2.13) over a VPN link that I've set up. That address is NOT > reachable directly from the 'net -- only over the VPN. > > Mail sent through the VPS' IP is correctly forwarded and received at the > server. But once I stuck the VPN in the loop it's getting tagged as spam by > Amavis/Spamasssassin running on the office server. > > The received message's headers have > > X-Spam-Flag: YES > X-Spam-Score: 9.6 > X-Spam-Level: ********* > X-Spam-Status: Yes, score=9.6 tagged_above=-10 required=5 > tests=[BAYES_00=-1.9, RDNS_NONE=1.5, SPF_HELO_FAIL=10] > autolearn=no autolearn_force=no
DISABLE SPF on any machine that is not receiving mail *directly* from the Internet. Your inbound relay will always fail downstream SPF checks. -- Viktor.