Spam Filter ISP Forums : SPF Question? https://www.logsat.com/spamfilter/forums/ Sat, 06 Jun 2026 16:31:13 +0000 Fri, 10 Sep 2004 21:26:00 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=4254 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[SPF Question? : Dan, SPF is a good idea, but...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4254&PID=4255&title=spf-question#4255 Author: LogSat
Subject: 4254
Posted: 10 September 2004 at 9:26pm

Dan,

SPF is a good idea, but it does have some drawbacks. You've encountered one of them. That is just how SPF is supposed to work.

SPF is used to authenticate the sender, it verifies that the sender is authorized to send email  from a specific domain.

The following applies only if I understood you correctly and ispname.com is one of *your* domains.

joe@ispname.com cannot use your outgoing SMTP server per your policies.So he uses his cable company's SMTP server, but is still using"joe@ispname.com" as his email address when doing so, even though hiscable company is rr.com for example.

rr.com accepts joe's email (and some cable companies may reject it inthe future, as he's not using a "from" address belonging to his cablecompany) and then sends it to you, or to any other ISP who is using SPFfilters. The SPF filter at this point looks at the "from" domain. It'sispname.com. It then queries your DNS to see if the IP connecting tothe SPF server is authorized to send email on behalf of ispname.com.I'm pretty sure you don't have rr.com SMTP server's IP address inthere, so it will fail. This is just what SPF is supposed to do, toverify that rr.com can send emails using ispname.com as the "from"email address.

Hope this helps,

Roberto F.
LogSat Software

]]> Fri, 10 Sep 2004 21:26:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4254&PID=4255&title=spf-question#4255 <![CDATA[SPF Question? : Roberto, We are using SPF on...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4254&PID=4254&title=spf-question#4254 Author: Dan B
Subject: 4254
Posted: 10 September 2004 at 7:06pm

Roberto,

We are using SPF on our SF and I'm seeing rejections do to SPF failures.  Here is what I'm seeing in the log files.   User Joe has an email account joe@ispname.com but he has a cable connection.  We do not allow any customers not to send outgoing mail to our SMTP relay server when the user is not on our ip network.  So he uses the cable provider's outgoing mail server.  When he sends an email using his joe@ispname.com to another user on ispname.com mail server it gets rejected due to SPF fails due to ispname.com TXT record does not contain the ip address of the cable provider's mail server.  The cable provider does have SPF txt record setup for their mail server ip addresses but it seems that the Spam Filter Software doesn't look at the connection ip address of the cable provider's mail server.  It only looks at the email address domain name and rules against that.

Is this the way it's supposed to be or is there a bug in the way SPF within Spam Filter is working.


Thanks,
Dan B

]]> Fri, 10 Sep 2004 19:06:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4254&PID=4254&title=spf-question#4254