On 10/09/2015 21:13, Wietse Venema wrote:
Mick:
Hi,
I'm trialling DMARC to two of my domains. On checking the results when
posting from the secondary domain I receive 'SPF Domain Alignment Result
= FAIL'. I think this is because postfix always says HELO with the
primary domain name, which is obviously different to the secondary. Is
there a way to rewrite the message envelope to say HELO using the same
domain used in the from field?
I suspect that the problem is that the SMTP client IP address no
not match the SPF rule.
You may want to set up sender_dependent_default_transport to use
different Postfix SMTP clients depending on the envelope sender
email address, with "-o smtp_bind_address" settings in master.cf
for the proper client IP address.
Hi Wietse,
I only have 1 IP address (2 if you count the IPv6 address). A reverse
DNS lookup will always find my primary domain so even if I used
'sender_dependent_default_transport' and set up multiple switches just
to change HELO name, they still have to point to the same IP. If
reverse DNS was then carried out, secondary domain provided in the HELO
would not match and mail could be rejected. Think I'm stuffed without
additional IPv4s, but at least I know why.
Thanks for your advice.
Mick.
Wietse