Not sure that answer is terribly useful.
I know it is *my* boundary (actually it is not my boundary but the boundary of
a customer using our software over which we have no control). We cannot
guarantee that the AV provider will do it and the customer may not have the
option of using a different AV provider. It is clearly in the AV providers
interest to do it and I'm sure many will but all may not.
A good RFC will provide a solution to this or at least advice.
Simon
---- Message from mailto:<johnp(_at_)idimo(_dot_)com johnp
<johnp(_at_)idimo(_dot_)com> at 23-Sep-2005 10:21:44 ------
Simon Tyler wrote:
All,
I know this must have been discussed to death but I cannot find a
satisfactory answer
to it.
If I have an MTA sat behind an outsourced AV gateway then how can I get SPF
to work?
Outbound mail is fine as I can setup an include rule to include the gateway
in my SPF
record.
Inbound causes a problem. SPF is meant to be checked "at the boundary". Well
my server
is "my boundary". The outsourced server is not,
Sorry - the reality is that the outsourced AV server *is* your boundary - - you
set it up,
so it's part of your mail system. If you're not happy with the way is does or
doesn't
check SPF - find another one.
Slainte,
JohnP.
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com