SPF/TXT records

[Matus UHLAR - fantomas]

On 17.06.09 10:46, Jeff Lightner wrote:
> When one sets SPF/TXT record is it for the relay server/IP that sent the
> email to the internet or the originating one?

maybe even both. If the outgoing mail relay checks for SPF, and you don't
use SMTP authentication (in which case relays may not check for SPF), you
need SPF for originating server to, so the relay doesn't reject the mail
imediately. If the relay sends such mail to other servers, its IP should be
in SPF too.

I have SPF for fantomas.sk:

fantomas.sk.            43200   IN      SPF     "v=spf1 mx -all"

it should be checked when someone is trying to send mail with @fantomas.sk
as envelope from address.

> For example we have a server (atuprd01.water.com) that can not be
> reached via the internet.  Email originating there is relayed through
> our MS-Exchange server (if sent with domain water.com) or a Linux
> Sendmail server (if sent with domain waterinvoice.com).  All email sent
> via exchange goes out an IP separate from incoming mail (MX) IP.   All
> email sent via Sendmail has a separate IP from incoming mail (MX) IP.  
>  
> Should the SPF specify the outbound IP (e.g. 12.44.84.204 for
> atlsnml2.waterinvoice.com) for the Sendmail server email or the IP/name
> for atuprd01.water.com? 

water.com should have your ms exchange's IP and waterinvoice.com should have
your linux servers' IP. Watch out if there is really no email going from
water.com via your linux server and no mail coming from waterinvoice.com via
your exchange server...

I assume 

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
99 percent of lawyers give the rest a bad name.