>> Which case is there a record, but the sending server IP >> doesn't match?
> That depends what the sender's SPF record is set for in > the "all" clause. > If it's ?all you get SPF_NEUTRAL > If it's ~all you get SPF_SOFTFAIL > if it's -all you get SPF_FAIL. That makes sense but now the scores for these rules have me a little confused. If a domain administrator indicates that we should fail any message not sourced from his IP's, why is the score for SPF_FAIL the smallest of the three? Shouldn't it be set at or near the required_score, instead?