Re: SPF Record with Multiple Servers
Robert Bridge <[email protected]> Thu, 25 Apr 2013 17:45:29 +0100
| Newsgroups | gmane.linux.gentoo.server |
|---|---|
| Message-ID | <CA+Uub+duHXANL+RC1WA4uyeyfCRugkf_xG+gj8DW-18JQM=Gyw@mail.gmail.com> |
--089e0115f79a7274f904db3225db Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable The only servers that need inclusion in the SPF declaration are servers that will be passing email out of your domain. Other internal servers don't matter, as they never connect to anyone elses email servers. On 25 April 2013 17:30, Vin=EDcius Ferr=E3o <[email protected]> wro= te: > Hello Robert, > > The internal MTA has an Internet facing address since we have a plenty > of them we just use it. > > Ordinary users connect through this internal MTA to send/receive mail. > But everything that goes outside of the domain goes through the Postfix > server. So I'm just uncertain about this configuration. Since the message > originates in the internal MTA and the its relayed to the Postfix server.= .. > > So I just need to know if the SPF record should include the internal MTA > too, since the postfix server is already in the SPF declaration. > > Thanks in advance, > > Sent from my iPhone > > On 25/04/2013, at 13:03, "Robert Bridge" <[email protected]> wrote: > > Just the internet facing one, as I understand it. Nothing else should > ever see the internal MTA, and it may not even have a routable IP address= ! > > > On 25 April 2013 16:57, Vin=EDcius Ferr=E3o <[email protected]> w= rote: > >> Hello Halassy, thanks for your reply. >> >> I'm aware of the syntax, I just mistyped it. >> >> The main question still continues, should I put both MTAs or just the >> Internet facing one? >> >> Thanks in advance, >> >> Sent from my iPhone >> >> On 25/04/2013, at 05:14, "Halassy Zolt=E1n" <[email protected]> wrote= : >> >> > Hello! >> > >> > Using MX in SPF record is a simple way to describe trivial two-way >> setups, that is, MX will also send the mails, not just receive them. If = you >> have a non-trivial setup, you can use, for example IP addresses, like ip= 6: >> and ip4:. Add every address which from a mail could possibly leave your >> organization, and that's it, do not use MX. BTW, the syntax is v=3Dspf1,= not >> what you wrote. >> > >> > 2013-04-25 01:32 keltez=E9ssel, Vin=EDcius Ferr=E3o =EDrta: >> >> I've a question about the SPF setup in my domain. >> >> >> >> We have two MTAs: an exchange server that does not use SMTP to relay >> messages to the Internet and a Postfix Mail Gateway on the border to sen= d >> and receive messages to/from the internet. >> >> >> >> The clients connect on the Exchange Server to relay messages to the >> external world. So an SMTP connection would start in the Exchange, then = it >> relays to the Postfix server and then to the Internet. On the other hand >> when a message come from the Internet it first arrives in the Postfix >> server and after the processing it's handled to the Exchange server. >> >> >> >> The question is: which SPF TXT string I should use? >> >> >> >> The Postfix server is my only MX. And I don't know if I should includ= e >> the Exchange Server name in the SPF rules. >> >> >> >> I was considering: vspf=3D1 mx -all >> >> >> >> But this does not include the Exchange, and I don't know if it's righ= t >> or not. >> > >> > >> >> > --089e0115f79a7274f904db3225db Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>The only servers that need inclusion in the SPF decla= ration are servers that will be passing email out of your domain.</div><div= ><br></div><div>Other internal servers don't matter, as they never conn= ect to anyone elses email servers.</div> </div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On 25 A= pril 2013 17:30, Vin=EDcius Ferr=E3o <span dir=3D"ltr"><<a href=3D"mailt= o:[email protected]" target=3D"_blank">[email protected]</a= >></span> wrote:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> <div dir=3D"auto"> <div>Hello Robert,</div> <div><br> </div> <div>The internal MTA has an Internet facing address since we have a plenty= of them we just use it.</div> <div><br> </div> <div>Ordinary users connect through this internal MTA to send/receive mail.= But everything that goes outside of the domain goes through the Postfix se= rver. So I'm just uncertain about this configuration. Since the message= originates in the internal MTA and the its relayed to the Postfix server...</div> <div><br> </div> <div>So I just need to know if the SPF record should include the internal M= TA too, since the postfix server is already in the SPF declaration.</div><d= iv class=3D"im"> <div><br> </div> <div>Thanks in advance,<br> <br> Sent from my iPhone</div> </div><div><div class=3D"h5"><div><br> On 25/04/2013, at 13:03, "Robert Bridge" <<a href=3D"mailto:ro= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<br> <br> </div> <blockquote type=3D"cite"> <div> <div dir=3D"ltr">Just the internet facing one, as I understand it. Nothing = else should ever see the internal MTA, and it may not even have a routable = IP address!</div> <div class=3D"gmail_extra"><br> <br> <div class=3D"gmail_quote">On 25 April 2013 16:57, Vin=EDcius Ferr=E3o <spa= n dir=3D"ltr"> <<a href=3D"mailto:[email protected]" target=3D"_blank">vinicius= [email protected]</a>></span> wrote:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> Hello Halassy, thanks for your reply.<br> <br> I'm aware of the syntax, I just mistyped it.<br> <br> The main question still continues, should I put both MTAs or just the Inter= net facing one?<br> <div><br> Thanks in advance,<br> <br> Sent from my iPhone<br> <br> </div> <div> <div>On 25/04/2013, at 05:14, "Halassy Zolt=E1n" <<a href=3D"m= ailto:[email protected]" target=3D"_blank">[email protected]</a>> wr= ote:<br> <br> > Hello!<br> ><br> > Using MX in SPF record is a simple way to describe trivial two-way set= ups, that is, MX will also send the mails, not just receive them. If you ha= ve a non-trivial setup, you can use, for example IP addresses, like ip6: an= d ip4:. Add every address which from a mail could possibly leave your organization, and that's it, do not u= se MX. BTW, the syntax is v=3Dspf1, not what you wrote.<br> ><br> > 2013-04-25 01:32 keltez=E9ssel, Vin=EDcius Ferr=E3o =EDrta:<br> >> I've a question about the SPF setup in my domain.<br> >><br> >> We have two MTAs: an exchange server that does not use SMTP to rel= ay messages to the Internet and a Postfix Mail Gateway on the border to sen= d and receive messages to/from the internet.<br> >><br> >> The clients connect on the Exchange Server to relay messages to th= e external world. So an SMTP connection would start in the Exchange, then i= t relays to the Postfix server and then to the Internet. On the other hand = when a message come from the Internet it first arrives in the Postfix server and after the processing it's h= andled to the Exchange server.<br> >><br> >> The question is: which SPF TXT string I should use?<br> >><br> >> The Postfix server is my only MX. And I don't know if I should= include the Exchange Server name in the SPF rules.<br> >><br> >> I was considering: vspf=3D1 mx -all<br> >><br> >> But this does not include the Exchange, and I don't know if it= 's right or not.<br> ><br> ><br> <br> </div> </div> </blockquote> </div> <br> </div> </div> </blockquote> </div></div></div> </blockquote></div><br></div> --089e0115f79a7274f904db3225db--