Re: How do you handle SPF errors?
Alessandro Vesely <[email protected]>
| Newsgroups | gmane.mail.imap.courier.general |
|---|---|
| Message-ID | <[email protected]> |
On Sat 02/Dec/2023 13:42:09 +0100 Sam Varshavchik wrote: > Alessandro Vesely writes: >>> >>>> It should return 4xx on DNS hiccups. >>> >>> Courier's implementation is based on an earlier SPF specification that >>> directed that DNS lookup failures resulted in an "error" status. >>> >>> opt BOFHSPFHARDERROR is the setting. The default is >>> >>> opt BOFHSPFHARDERROR=fail,softfail >>> >>> So, either you added "error" here, or the reason for the failure is >>> something else. >> >> No, I had "error" in BOFHSPFHELO/MAILFROM. Too conservative. Now I removed >> it, so it should correctly result in 4xx. > > That's not quite it. > > BOFHSPFHELO/BOFHSPFMAILFROM controls which SPF status will result in an error. Yup. More exactly, they control which results are accepted. The default value of these is not documented. I'd guess it's "off". > BOFHSPFHARDERROR controls whether an error is reported as a hard or a soft > failure. This has a good default value, fail and softfail, which I never changed. To the point that I forgot it existed. Best Ale -- _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users