Re: Problem with SPF when more than 1 "to" recipients (was: Problem with SPFwith cc ?)

"Peter Bowyer" <[email protected]> Mon, 6 Sep 2004 14:20:01 -0000 (GMT)
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
[email protected] said:
> sorry! mistake
>
> not cc but three recipients in to:
>
> From: Bogdan Florea <[email protected]>
> To:  [email protected],  [email protected],
> [email protected]
>
> and all others then [email protected] are treated as Spoof?

Sounds like you may have hit a bug in Exiscan/SPF with multiple
recipients. I'm sure Tom will be along soon.

But in the meantime:

> deny message = X-SPF-3: SPOOF!
>           sender_domains = +local_domains
>           hosts   = ! 172.16.0.0/16
>           spf     = !pass
>

This will deny all mail from domains which don't publish SPF, and from
those whose SPF record specifies a 'neutral' result. Is this what you want
to do?

You should only hard deny on a 'fail' from SPF. That is the only result
which means that the sending host is disallowed by the FROM domain. Any
other result is inconclusive.

Peter