This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMTP, SPF and domain forwards

Hello everyone,

My boss has opened a number of domains at a hosting provider and set almost all of them up to forward all emails to his company account.

The problem is that we're using (among other things) optional SPF validation for incoming mail messages. The way the mail is forwarded from the hosting provider will, however, cause all mail which have a SPF record configured to bounce.

My plan is to configure an exception for the hosting provider's outgoing SMTP server so that SPF won't be validated. Unfortunately, it seems that obtaining a list of possible source isn't easy (the guy I talked over the phone obviously didn't understand what I was talking about) so I'm wondering if there wouldn't be any alternative to this.

Would anyone have a suggestion on how to setup these forwarders so that SPF validation will work ?


This thread was automatically locked due to age.
Parents
  • Fulgan, have you looked at the SMTP log to see the source IP of the bounced emails?  Usually, it's just one IP for each domain.

    I don't know any other way unless your know the senders' domains to create SPF exceptions for.  Your boss also occasionally could consult the 'SMTP Log' tab in the User Portal and double-click on "SPF" to see addresses/domains he needed to add to his personal whitelist.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Fulgan, have you looked at the SMTP log to see the source IP of the bounced emails?  Usually, it's just one IP for each domain.

    I don't know any other way unless your know the senders' domains to create SPF exceptions for.  Your boss also occasionally could consult the 'SMTP Log' tab in the User Portal and double-click on "SPF" to see addresses/domains he needed to add to his personal whitelist.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data