Enforce SPF for specific sender domains only

Asked by Brendan Hide

Hi

Auto-forwarded mails always fail SPF checks regardless of their legitimacy. As a result we have postfix configured to not use SPF and have spamassassin add an spf_fail score to the overall spam score.

However we would like to actually enforce SPF on specific domains. More than that we also want the facility to set it so that a would-be softfail on these domains are actually interpreted as rejections.

My understanding is that this can be achieved very simply within postfix's main.cf with this perl spf plugin. Unfortunately I'm having difficulty seeing how to do so.

If anyone can give me pointers as to where to start or if there are any tutorials covering these subjects, please let me know.
Thank you.

Question information

Language:
English Edit question
Status:
Answered
For:
postfix-policyd-spf-perl Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Scott Kitterman (kitterman) said :
#1

The Perl implementation that you are using is very basic and does not have much in the way of configurability. There is also a Python implementation that is much more complete. Have a look at https://launchpad.net/pypolicyd-spf as this is a standard configuration option for managing forwarders. It doesn't do it exactly the way you describe it, but I think it will better meet your needs.

Can you help with this problem?

Provide an answer of your own, or ask Brendan Hide for more information if necessary.

To post a message you must log in.