SPF Rules?

[Matt Kettler]

Johnny Stork wrote:
> I finally got around to upgrading our MailScanner setup running on
> RHES4, I first used the tarball for the clam/SA packages and then the
> MailScanner rpm upgrade tarball. All seems fine and I am now trying to
> go through and address various issues that I have not fully configured
> yet. For now I am trying to understand how the SPF rules work. I know
> very little about SPF or how it is implemented in mailscanner, but it
> seems that almost all messages trigger this rule below? Is this normal
> 
> Score   Rule                                   Description
> 2.08	SPF_HELO_SOFTFAIL	SPF: HELO does not match SPF record (softfail)
> 
No, it's not normal.

However, this is NOT a MailScanner issue. It's a SpamAssassin issue, as that's a
SpamAssassin rule.

My guess is that you've got a broken trust path, and SA is confused about which
host is dropping off the mail to your network.

http://wiki.apache.org/spamassassin/TrustPath