17 messages in net.sourceforge.lists.courier-users[courier-users] Re: Completely turnin...
FromSent OnAttachments
Lloyd ZusmanJan 23, 2006 8:43 am 
Sam VarshavchikJan 23, 2006 3:31 pm 
Lloyd ZusmanJan 24, 2006 6:55 am 
Sam VarshavchikJan 24, 2006 3:56 pm 
Lloyd ZusmanJan 24, 2006 4:48 pm 
Sam VarshavchikJan 24, 2006 6:01 pm 
Lloyd ZusmanJan 25, 2006 1:33 am 
Sam VarshavchikJan 25, 2006 3:54 am 
Lloyd ZusmanJan 25, 2006 5:51 am 
Sam VarshavchikJan 25, 2006 3:22 pm 
Lloyd ZusmanJan 25, 2006 3:59 pm 
Sam VarshavchikJan 25, 2006 4:09 pm 
Lloyd ZusmanJan 25, 2006 4:53 pm 
Sam VarshavchikJan 25, 2006 5:20 pm 
Lloyd ZusmanJan 25, 2006 6:43 pm 
Sam VarshavchikJan 25, 2006 7:24 pm 
Lloyd ZusmanJan 26, 2006 8:11 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Re: Completely turning off hard SPF bounces (webadmin)Actions...
From:Lloyd Zusman (lj@asfast.com)
Date:Jan 26, 2006 8:11:47 am
List:net.sourceforge.lists.courier-users

On Wed, 25 Jan 2006 22:26:29 -0500, Sam Varshavchik <mrs@courier-mta.com>
wrote:

Lloyd Zusman writes:

OK. So then how can we explain the difference in behavior between messages going to recipient 1 and recipient 2, as described above?

If you have =all set for all three SPF settings, the message should NOT bounce with an SPF error for any reason. Setting aside that issue for the moment, if you do not have a localmailfilter installed in a particular account, that account is treated as if it has a localmailfilter that whitelists all mail addressed to it.

So at least the second part of your scenario makes sense -- mail gets whitelisted, gets past that stage, and gets handed off to courierfilter as the next step.

So the only question here is why you apparently get a 417/517 SPF error, if you supposedly set all three SPF checks to =all, that should not happen under any circumstances.

I cannot reproduce this. With my own server, and default SPF settings, I get the same SPF error that you do, with that domain with broken SPF records. If I set the SPF checks to =all, the error goes away.

The only possibibility I can think of -- and this is not documented -- is if you also set the BOFHSPF variables in the smtpaccess file for certain IP address ranges only. The settings in the smtpaccess file take precedence over the bofh file for mail originating from the corresponding IP address ranges only.

Thanks. Well, I have no BOFHSPF* variables in the smtpaccess file.

I'll keep investigating this mystery, and once I have more info, I'll post my findings.

.---------, 0__0 / ( oo'---, / oo\ ,\ | | \ ,=__/ \ / / /------| /| |__|-' |__|'