On 29 April 2018 at 08:35, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > > >> On Apr 29, 2018, at 3:28 AM, @lbutlr <krem...@kreme.com> wrote: >> >> It appears that Swiss domain uses Google for their email: >> >> finarea.ch. 21599 IN MX 20 alt2.aspmx.l.google.com. >> finarea.ch. 21599 IN MX 30 aspmx2.googlemail.com. >> finarea.ch. 21599 IN MX 30 aspmx3.googlemail.com. >> finarea.ch. 21599 IN MX 30 aspmx4.googlemail.com. >> finarea.ch. 21599 IN MX 30 aspmx5.googlemail.com. >> finarea.ch. 21599 IN MX 10 aspmx.l.google.com. >> finarea.ch. 21599 IN MX 20 alt1.aspmx.l.google.com. >> finarea.ch. 21599 IN TXT "v=spf1 >> include:aspmx.googlemail.coma:spf.finarea.ch ~all” >> >> >> So the smpt1 looks suspicious. > > No. Fairly typical.
This is a genuine and expected sender (VoIP provider). I am less sure about atlas.net.tr, but it is probably genuine and expected by recipient too. Unwanted ones I have not bothered to report here. I don't require encryption on port 25: smtpd_tls_security_level = may
