I'm running a brand new installation of SA 3.3.2 with the Milter on FreeBSD 8.2.
Everything is going smoothly, for the most part (there seems to be one particular spammer who's evading SA, but whatever), but there's one little thing that bugs me slightly. I use authenticated SMTP to send e-mail. The SPF records for my domain (kfu.com) basically say that mail must come from my mail server and nowhere else. However, my expectation is that my mail server should make an exception if (and only if) the mail is sent with SMTP AUTH. However, such mail winds up getting SPF_FAIL in the SA report. Here's a received header example: Received: from {my laptop} ({hostname of NAT gateway it happens to be behind} [x.x.x.x]) (authenticated bits=0) by quack.kfu.com (8.14.5/8.14.5) with ESMTP id q04K12lj052202 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <nsa...@kfu.com>; Wed, 4 Jan 2012 12:01:05 -0800 (PST) (envelope-from nsa...@kfu.com) I assert that Mail::SPF should regard Received: headers that have the "authenticated" modifier in them as being ennobled and SPF should not apply. Is there some mechanism for this? -- View this message in context: http://old.nabble.com/SPF-tests-and-authenticated-SMTP-tp33081983p33081983.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.