RW skrev den 2013-08-09 00:01:
dkim is generally the better way to go since legitimate emails can
fail
SPF due to forwarding.
and dkim never fails on forwards ?, well it does if forwards mangle
bódy and removes or changes headers in a way that dkim breaks, i have
seen it since i begin using it, it not yet resolved, but for
spamassassin i can atleast get dmarc=pass return
try sending email from facebook to one self mailadress not on facebook
:)
make rule on this
on spf, just remember to have trusted_networks setup with all ips that
do forwarding, then spf does work, but who cares ?