<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-ZA" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi Folks,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Running MailScanner 5.3.4-3 on Centos 7, I’m using, for SPF checking:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">pypolicyd-spf-1.3.2-5.el7.noarch<o:p></o:p></p>
<p class="MsoNormal">python-pyspf-2.0.14-13.el7.noarch<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Using these policyd-spf.conf settings:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">debugLevel = 2<o:p></o:p></p>
<p class="MsoNormal">defaultSeedOnly = 1<o:p></o:p></p>
<p class="MsoNormal">HELO_reject = SPF_Not_pass<o:p></o:p></p>
<p class="MsoNormal">Mail_From_reject = Fail<o:p></o:p></p>
<p class="MsoNormal">PermError_reject = False<o:p></o:p></p>
<p class="MsoNormal">TempError_Defer = False<o:p></o:p></p>
<p class="MsoNormal">skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0/104,::1<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Which seems to work fine, as it issues warnings to servers that aren’t authorised to send for domains that don’t have SPF records set up correctly. However, when I do a command line test from a remote (unauthorised) server to send mail
through this server, it happily accepts the mail, even though the unauthorised server is not in the SPF list. The sending server is not whitelisted, I can’t understand why it doesn’t get rejected by the SPF check.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Some advice or pointers would be greatly appreciated. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you.<o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:4.8pt">
<td width="501" colspan="2" valign="top" style="width:376.1pt;padding:0cm 5.4pt 0cm 5.4pt;height:4.8pt">
<p class="MsoNormal" style="line-height:105%"><b><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">___________________________________________________<o:p></o:p></span></b></p>
</td>
</tr>
<tr style="height:4.8pt">
<td width="293" valign="top" style="width:219.75pt;padding:0cm 5.4pt 0cm 5.4pt;height:4.8pt">
<p class="MsoNormal" style="line-height:105%"><b><span style="font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Pramod Daya</span></b><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">
(</span></i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">CEO)</span><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><i><span style="font-size:7.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA">M.Sc. Computer Science (U. of Oregon)<o:p></o:p></span></i></p>
<p class="MsoNormal" style="line-height:105%"><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Unit 5, Melomed Office Park<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Punters Way, Kenilworth<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Cape Town, South Africa 7708<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:105%"><span style="mso-fareast-language:EN-ZA"><a href="http://www.mindspring.co.za/"><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:#0563C1">www.mindspring.co.za</span></a></span><span style="mso-fareast-language:EN-ZA"><o:p></o:p></span></p>
</td>
<td width="208" valign="top" style="width:156.35pt;padding:0cm 5.4pt 0cm 5.4pt;height:4.8pt">
<p class="MsoNormal" align="right" style="text-align:right;line-height:105%"><b><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">
</span></b><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><img border="0" width="124" height="30" style="width:1.2916in;height:.3125in" id="Picture_x0020_8" src="cid:image001.png@01D81ABB.F1FB1480"></span><b><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA"><o:p></o:p></span></b></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:105%"><b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Work:
</span></b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA"> +27 21 657 1780<o:p></o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:105%"><b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">Fax:
</span></b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">+27 21 671 7599<o:p></o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:105%"><b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA"> Cell:</span></b><span style="font-size:9.0pt;line-height:105%;font-family:"Verdana",sans-serif;mso-fareast-language:EN-ZA">
+27 83 675 0367<span style="color:blue"><o:p></o:p></span></span></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:105%"><span style="font-size:10.0pt;line-height:105%;font-family:"Verdana",sans-serif;color:blue;mso-fareast-language:EN-ZA"><a href="mailto:pramod@mindspring.co.za"><span style="color:blue">pramod@mindspring.co.za</span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="mso-fareast-language:EN-ZA"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>