On 15 Jul 2019, at 13:44, Phil Stracchino <ph...@caerllewys.net> wrote:
>
> On 7/15/19 3:29 PM, Bill Cole wrote:
>> On 15 Jul 2019, at 14:02, Phil Stracchino wrote:
>>> And here's the log of the last failure:
>>
>> [...]
>>> Jul 15 13:49:11 minbar policyd-spf[25139]: Starting
>>> Jul 15 13:49:11 minbar policyd-spf[25139]: Config: {'debugLevel': 3,
>>> 'HELO_reject': 'SPF_Not_Pass', 'Mail_From_reject': 'SPF_Not_Pass',
>>
>> AHA! Config!
>>
>>> 'PermError_reject': 'True',
>>
>> I would guess that means that you have *explicitly chosen* to reject
>> mail when hitting a "PermError."
>>
>> Don't do that.
>
> The question that comes to mind here is, if one should not reject mail
> based on SPF failures, then what is even the point of checking SPF?
An SPF fail result is not the same thing as “I failed to check SPF”
--
IT'S POTATO, NOT POTATOE Bart chalkboard Ep. 7F01
