Re: SPF Record with Multiple Servers

--001a11c25d28efe5fa04db318bcd
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Just the internet facing one, as I understand it. Nothing else should ever
see the internal MTA, and it may not even have a routable IP address!


On 25 April 2013 16:57, Vin=EDcius Ferr=E3o <[email protected]> wro=
te:

> Hello Halassy, thanks for your reply.
>
> I'm aware of the syntax, I just mistyped it.
>
> The main question still continues, should I put both MTAs or just the
> Internet facing one?
>
> Thanks in advance,
>
> Sent from my iPhone
>
> On 25/04/2013, at 05:14, "Halassy Zolt=E1n" <[email protected]> wrote:
>
> > Hello!
> >
> > Using MX in SPF record is a simple way to describe trivial two-way
> setups, that is, MX will also send the mails, not just receive them. If y=
ou
> have a non-trivial setup, you can use, for example IP addresses, like ip6=
:
> and ip4:. Add every address which from a mail could possibly leave your
> organization, and that's it, do not use MX. BTW, the syntax is v=3Dspf1, =
not
> what you wrote.
> >
> > 2013-04-25 01:32 keltez=E9ssel, Vin=EDcius Ferr=E3o =EDrta:
> >> I've a question about the SPF setup in my domain.
> >>
> >> We have two MTAs: an exchange server that does not use SMTP to relay
> messages to the Internet and a Postfix Mail Gateway on the border to send
> and receive messages to/from the internet.
> >>
> >> The clients connect on the Exchange Server to relay messages to the
> external world. So an SMTP connection would start in the Exchange, then i=
t
> relays to the Postfix server and then to the Internet. On the other hand
> when a message come from the Internet it first arrives in the Postfix
> server and after the processing it's handled to the Exchange server.
> >>
> >> The question is: which SPF TXT string I should use?
> >>
> >> The Postfix server is my only MX. And I don't know if I should include
> the Exchange Server name in the SPF rules.
> >>
> >> I was considering: vspf=3D1 mx -all
> >>
> >> But this does not include the Exchange, and I don't know if it's right
> or not.
> >
> >
>
>

--001a11c25d28efe5fa04db318bcd
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Just the internet facing one, as I understand it. Nothing =
else should ever see the internal MTA, and it may not even have a routable =
IP address!</div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quo=
te">
On 25 April 2013 16:57, Vin=EDcius Ferr=E3o <span dir=3D"ltr">&lt;<a href=
=3D"mailto:[email protected]" target=3D"_blank">[email protected]=
frj.br</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello Halassy, thanks for your reply.<br>
<br>
I&#39;m aware of the syntax, I just mistyped it.<br>
<br>
The main question still continues, should I put both MTAs or just the Inter=
net facing one?<br>
<div class=3D"im HOEnZb"><br>
Thanks in advance,<br>
<br>
Sent from my iPhone<br>
<br>
</div><div class=3D"HOEnZb"><div class=3D"h5">On 25/04/2013, at 05:14, &quo=
t;Halassy Zolt=E1n&quot; &lt;<a href=3D"mailto:[email protected]">zhalass=
[email protected]</a>&gt; wrote:<br>
<br>
&gt; Hello!<br>
&gt;<br>
&gt; Using MX in SPF record is a simple way to describe trivial two-way set=
ups, that is, MX will also send the mails, not just receive them. If you ha=
ve a non-trivial setup, you can use, for example IP addresses, like ip6: an=
d ip4:. Add every address which from a mail could possibly leave your organ=
ization, and that&#39;s it, do not use MX. BTW, the syntax is v=3Dspf1, not=
 what you wrote.<br>

&gt;<br>
&gt; 2013-04-25 01:32 keltez=E9ssel, Vin=EDcius Ferr=E3o =EDrta:<br>
&gt;&gt; I&#39;ve a question about the SPF setup in my domain.<br>
&gt;&gt;<br>
&gt;&gt; We have two MTAs: an exchange server that does not use SMTP to rel=
ay messages to the Internet and a Postfix Mail Gateway on the border to sen=
d and receive messages to/from the internet.<br>
&gt;&gt;<br>
&gt;&gt; The clients connect on the Exchange Server to relay messages to th=
e external world. So an SMTP connection would start in the Exchange, then i=
t relays to the Postfix server and then to the Internet. On the other hand =
when a message come from the Internet it first arrives in the Postfix serve=
r and after the processing it&#39;s handled to the Exchange server.<br>

&gt;&gt;<br>
&gt;&gt; The question is: which SPF TXT string I should use?<br>
&gt;&gt;<br>
&gt;&gt; The Postfix server is my only MX. And I don&#39;t know if I should=
 include the Exchange Server name in the SPF rules.<br>
&gt;&gt;<br>
&gt;&gt; I was considering: vspf=3D1 mx -all<br>
&gt;&gt;<br>
&gt;&gt; But this does not include the Exchange, and I don&#39;t know if it=
&#39;s right or not.<br>
&gt;<br>
&gt;<br>
<br>
</div></div></blockquote></div><br></div>

--001a11c25d28efe5fa04db318bcd--