[Mimedefang] SPF

[Tomasz Ostrowski]

On Sun, 05 Nov 2006, David F. Skoll wrote:

> SPF breaks forwarding, which is very annoying.

It does not if it is set to use forwarded address in envelope. I'm
doing forwarding in procmail. This is a fragment of my script:

#########################################################
VACATION_PRIMARY_ADDRESS="user at example.com"
VACATION_PRIMARY_ADDRESS_REGEX=`echo "$VACATION_PRIMARY_ADDRESS" | sed -e 's:[\.\+]:\\\\&:g'`
VACATION_FORWARD="another_user at example.org"

:0 c
* ! ^FROM_DAEMON
* $ ! ^X-Loop: $VACATION_PRIMARY_ADDRESS_REGEX
| formail -A "X-Loop: $VACATION_PRIMARY_ADDRESS" -i "Return-Path:" | \
	$SENDMAIL "-f<$VACATION_PRIMARY_ADDRESS>" -oi "$VACATION_FORWARD"
#########################################################

This way the sender will not get a bounce with unknown address if
forward destination is broken.

> > For folks on the road, there are plenty of workable solutions.
> 
> We use OpenVPN, which works well if both ends are running Linux.
> Because of deficiencies in Windoze's "TUN" implementation, it's a bit
> more painful to get it working on that platform, but we managed it.

It is much easier to use submission port + starttls or smtps. Both do
not use smtp port which is often blocked.

Regards
Tometzky
-- 
...although Eating Honey was a very good thing to do, there was a
moment just before you began to eat it which was better than when you
were...
                                                      Winnie the Pooh