spf-discuss
[Top] [All Lists]

RE: SPF lookup with intermediate ISP mail relay

2004-11-24 01:57:17
-----Original Message-----
From: owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com 
[mailto:owner-spf-discuss(_at_)v2(_dot_)listbox(_dot_)com] On Behalf Of Rolf
Sent: woensdag 24 november 2004 7:25
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: [spf-discuss] SPF lookup with intermediate ISP mail relay


Does anyone know what if anything I can adjust to make SPF match the
right header info, or how I might adjust the headers (using sendmail)
as they arrive so that the right info can be seen?

I understand what you're trying to do, and why; but perusing the headers
for Received: headers is, in the case of SPF, somewhat questionable. The
beauty of doing SPF at the SMTP dialogue level, is that the connecting IP
address, for all purposes and intent, is a trustworthy entity (see earlier
posts about the difficulty of hijacking a TCP/IP connection). You lose
that certainty with (unsigned) headers.

The only clue I have found so far is "sendmail will not
expose the MAIL FROM: sender address by default. So
if you're using sendmail, please add this to /etc/sendmail.cf:
H?l?X-Envelope-From: $f"

Does that make any sense?

More or less. I would use $g, though.

I did this (to /etc/mail/sendmail.cf) but its made no difference and
indeed no header titled 'X-Envelope-From:' is added to incoming mail
that sendmail is processing. If that is indeed the solution, is there
some trick to getting sendmail.cf to have that added to the messages?

Your not giving us a whole lot to work with; config-wise, that is. Is your
ISP forwarding each mail to you with the envelope-from of the original
message? Or is this some batch-processs?

Assuming the former, your H line is in the form of:

H[ ? mflags ? ] hname : htemplate

Where the embedded "?l?" is a conditional, meaning: when the mail will be
delivered locally. Perhaps you are just looking for:

HX-Envelope-From: $g

Cheers,

- Mark 
 
        System Administrator Asarian-host.org
 
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx