Hi, to me it looks like email from=<communicati...@emails.aircanada.com><mailto:communicati...@emails.aircanada.com> to=<b...@othermx.com><mailto:b...@othermx.com>
Came in and was cleaned Nov 17 11:13:00 mail MailScanner[9148]: Content Checks: Detected and have disarmed web bug, phishing tags in HTML message in 9202040121F2.A6CDC from communicati...@emails.aircanada.com<mailto:communicati...@emails.aircanada.com> And requeued Nov 17 11:13:00 mail MailScanner[9148]: Requeue: 9202040121F2.A6CDC to EEAA64012121 And rejected Nov 17 11:13:02 mail postfix/smtp[9639]: EEAA64012121: to=<b...@othermx.com><mailto:b...@othermx.com>, relay=zeta.othermx.com[206.116.44.138]:25, delay=12, delays=10/0.01/1.3/0.33, dsn=5.7.1, status=bounced (host zeta.othermx.com[206.116.44.138] said: 550 5.7.1 <b...@othermx.com><mailto:b...@othermx.com>: Recipient address rejected: Please see http://www.openspf.net/Why?s=mfrom;id=communications%40emails.aircanada.com;ip=209.53.201.252;r=zeta.othermx.com (in reply to RCPT TO command)) WHY ?? According to http://www.openspf.org/Why?s=mfrom;id=communications%40emails.aircanada.com;ip=209.53.201.252;r=zeta.othermx.com the MX of mxdove.com is mail.mxdove.com but mail.mxdove.com has no SPF entry that I can find. Also From was @emails.aircanada.com and allowed IP’s are p18.neolane.net. 1229 IN TXT "v=spf1 ip4:70.38.33.128/30 ip4:70.38.36.40/30 ip4:174.142.154.200/30 ip4:174.142.245.174 ip4:174.142.245.175 -all" But the email came from mail.mxdove.com (209.53.201.252) according to the link above. Your logs show it came from [70.38.36.41] In short I think SPF checking looks only one hop back, and you want to relay, so you need to configure things for that. Not sure I helped but I tried. -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, UITS, SSG, Server Systems 860-486-9075 Hi, I just built a postfix mail server(mail.mytestmx.com) with PostfixAdmin, SPF and DKIM.,etc. It works very well. Now I try to use the new built server as the backup mail server of another server (zeta.othermx.com), so I add a backup domain in PostfixAdmin and setup DNS accordingly. Later there is an email came with destination to b...@othermx.com<mailto:b...@othermx.com>, the relay attempt got rejected at zeta.othermx.com because of SPF. So what is the solution here? Should I add the mail.mytestmx.com to zeta.othermx.com's SPF record and make it trust it? If so are there any risk?