Re: SPF and forwarding best practice

2008-04-15 Thread Benny Pedersen
On Mon, April 14, 2008 22:13, mouss wrote: >> 1: make all forwarded ips as trusted > and that solves the problem? none of us have seen OP logs > OP explictely said this does not and cited a comment in SPF.pm. well i am no perl guru :-) >> 2: add forwarders to the spf as A: > this requires the

Re: SPF and forwarding best practice

2008-04-15 Thread Matus UHLAR - fantomas
On 13.04.08 15:45, Moritz Borgmann wrote: > [EMAIL PROTECTED] [smtp.X.com] -> [EMAIL PROTECTED] [mx.B.com] -> [EMAIL > PROTECTED] [mx.A.com] > mx.B.com is in trusted_networks, all machines at A.com are in > internal_networks. always_trust_envelope_sender is enabled since the trusted > relays do

Re: SPF and forwarding best practice

2008-04-14 Thread mouss
Benny Pedersen wrote: On Mon, April 14, 2008 00:45, Moritz Borgmann wrote: Now, this setup entails the well-known problem that if X.com publishes an SPF record, SpamAssassin (3.2.4) spanks the message with SPF_FAIL since it checks the first *external* relay (mx.B.com), not the first untruste

Re: SPF and forwarding best practice

2008-04-14 Thread Benny Pedersen
On Mon, April 14, 2008 00:45, Moritz Borgmann wrote: > Now, this setup entails the well-known problem that if X.com publishes an > SPF record, SpamAssassin (3.2.4) spanks the message with SPF_FAIL since it > checks the first *external* relay (mx.B.com), not the first untrusted relay > against X.c