Re: SPF Record with Multiple Servers

Halassy Zoltán <[email protected]> Thu, 25 Apr 2013 10:13:35 +0200
Newsgroups gmane.linux.gentoo.server
Message-ID <[email protected]>
Ez egy kriptográfiai módszerrel aláírt, MIME formátumban levő üzenet.

--------------ms030703060103030205070102
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello!

Using MX in SPF record is a simple way to describe trivial two-way=20
setups, that is, MX will also send the mails, not just receive them. If=20
you have a non-trivial setup, you can use, for example IP addresses,=20
like ip6: and ip4:. Add every address which from a mail could possibly=20
leave your organization, and that's it, do not use MX. BTW, the syntax=20
is v=3Dspf1, not what you wrote.

2013-04-25 01:32 keltez=C3=A9ssel, Vin=C3=ADcius Ferr=C3=A3o =C3=ADrta:
> I've a question about the SPF setup in my domain.
>
> We have two MTAs: an exchange server that does not use SMTP to relay me=
ssages to the Internet and a Postfix Mail Gateway on the border to send a=
nd receive messages to/from the internet.
>
> The clients connect on the Exchange Server to relay messages to the ext=
ernal world. So an SMTP connection would start in the Exchange, then it r=
elays to the Postfix server and then to the Internet. On the other hand w=
hen a message come from the Internet it first arrives in the Postfix serv=
er and after the processing it's handled to the Exchange server.
>
> The question is: which SPF TXT string I should use?
>
> The Postfix server is my only MX. And I don't know if I should include =
the Exchange Server name in the SPF rules.
>
> I was considering: vspf=3D1 mx -all
>
> But this does not include the Exchange, and I don't know if it's right =
or not.



--------------ms030703060103030205070102
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME kriptográfiai aláírás
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--------------ms030703060103030205070102--