Simon Tyler wrote:
Not sure that answer is terribly useful.
I know it is *my* boundary (actually it is not my boundary but the boundary of a customer using our software over which we have no control). We cannot guarantee that the AV provider will do it and the customer may not have the option of using a different AV provider. It is clearly in the AV providers interest to do it and I'm sure many will but all may not.
A good RFC will provide a solution to this or at least advice.
Does the outsourced AV server check SPF? Does it do SRS? Either of these will enable you
to check you incoming mail as if it is forwarded from the AV server - which is effectively
what is happening.
SLainte,
JohnP
Simon
---- Message from mailto:<johnp(_at_)idimo(_dot_)com johnp <johnp(_at_)idimo(_dot_)com> at 23-Sep-2005 10:21:44 ------
Simon Tyler wrote:
All,
I know this must have been discussed to death but I cannot find a satisfactory
answer
to it.
If I have an MTA sat behind an outsourced AV gateway then how can I get SPF to
work?
Outbound mail is fine as I can setup an include rule to include the gateway in
my SPF
record.
Inbound causes a problem. SPF is meant to be checked "at the boundary". Well my
server
is "my boundary". The outsourced server is not,
Sorry - the reality is that the outsourced AV server *is* your boundary - - you set it up,
so it's part of your mail system. If you're not happy with the way is does or doesn't
check SPF - find another one.
Slainte,
JohnP.
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com