Mailing List CGatePro@mail.stalker.com Message #94906
From: Uwe Baemayr <cgate@baemayr.com>
Subject: Re: SPF and "mirror" question
Date: Fri, 25 Apr 2008 17:57:35 -0500
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
X-Mailer: Pegasus Mail for Windows (4.41)
Hi Martin:

Thanks for the link.  I think this page contains the answer:

  http://www.openspf.org/FAQ/Forwarding

I whitelisted the forwarder and the complaining stopped.  One thing I didn't
mention: relay.com has a new IP and the old was IP was in the "clients" list
(I didn't discover this until after I posted).  This, along with the fact
that 'relay.com' doesn't check reverse-DNS while 'final.com' does was
probably why this was done -- to keep spam that fails RDNS from piling up in
the 'relay.com' queue, resulting in that server being blacklisted for 15
minute intervals.

So, if I were to use "redirect" instead of "mirror" to forward mail, the
envelope info would get rewritten, but that would prevent my server from
checking SPF, blacklists, etc.  I'll have to weigh this against keeping
'relay.com' in the clients list.

Thanks for the pointer and please let me know if I misunderstood something.

--- Uwe

On 26 Apr 2008 at 7:54, Martin Miller wrote:

> Have you checked out http://www.openspf.org/ ?
> You might get a clearer understanding!
>
> 2008/4/26 Uwe Baemayr <cgate@baemayr.com>:
> >
> >
> >  Howdy!
> >
> >
> >  A Communigate SPF question: I "mirror" my email from my account at work to
> > my account at home, using an account-level forwarding rule with the "keep a
> > copy" option.  Both are Communigate servers.
> >
> >
> >  This morning, I received two messages with "Received-SPF: fail".  One such
> > message, from Newegg.com is below.  It looks to me like the Communigate
> > server at home (v5.1.14) was performing SPF checking and used the address of
> > the Communigate server at work (v5.0.8) that "mirrored" the message as the
> > sending host, so SPF failed.
> >
> >
> >  Names below obfuscated (don't want to see questions about my domains in
> > Google), but the routing is:
> >
> >
> >    newegg.com -> relay.com (mirror) -> final.com
> >
> >
> >  Is this expected behavior?  I would think that Communigate would check the
> > original sender, not the relay.  Or could this problem be solved by having
> > 'relay.com' also check SPF -- would 'final.com' not check SPF if there was
> > already an SPF record in the headers?  That would seem a little dangerous.
> >
> >
> >   Return-Path: <bo-bveftk4ab4ppkcaxscau0bjjcteyqz@b.email.newegg.com>
> >   Received: from [100.100.100.100] (HELO relay.com)
> >     by final.com (CommuniGate Pro SMTP 5.1.14)
> >     with ESMTP id 6175572 for me@final.com; Fri, 25 Apr 2008 03:58:36 -0700
> >   Received-SPF: fail
> >    receiver=final.com; client-ip=100.100.100.100;
> >    envelope-from=bo-bveftk4ab4ppkcaxscau0bjjcteyqz@b.email.newegg.com
> >   Received: from <me@relay.com>
> >     by relay.com (CommuniGate Pro RULES 5.0.8)
> >     with RULES id 2650887; Fri, 25 Apr 2008 05:10:26 -0500
> >   X-Autogenerated: Mirror
> >   Resent-From: <me@relay.com>
> >   Resent-Date: Fri, 25 Apr 2008 05:10:26 -0500
> >   Received: from [192.168.0.1] (HELO relay.com)
> >     by relay.com (CommuniGate Pro SMTP 5.0.8)
> >     with SMTP id 2650886 for me@relay.com; Fri, 25 Apr 2008 05:10:26 -0500
> >   Received: from mta700.email.newegg.com ([38.119.56.160]) by relay.com with
> >     Microsoft SMTPSVC(6.0.3790.1830);
> >     Fri, 25 Apr 2008 05:11:52 -0500
>
>
> --
> Martin Miller
> ___________________________________________________________________
>  <http://www.AnotherSphere.co.nz>
>
> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <CGatePro@mail.stalker.com>.
> To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
> To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
> To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
> Send administrative queries to  <CGatePro-request@mail.stalker.com>


Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster