Mailing List Archive: SPF: SRS

Problem with servers not recognizing srs

Index | Next | Previous | View Threaded

jakob at 123hjemmeside

Aug 6, 2008, 5:48 AM

Post #1 of 6 (5233 views)
Permalink

Problem with servers not recognizing srs

Hi,

I don't know if this is the right place to ask this question, but I couldn't find any other place

I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user [at] origdomain the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user [at] forward

My problems is that, when the server I forward to receives the mail the SPF check is done on the original domain (origdomain.com) and not the domain I added to the Return-Path (forward.com) and the mail is classified as spam.

Can anybody point me in the direction of what I have done wrong, or tell me if I have just misunderstood the point of SRS?

I'm using postfix and ASSP to forward the mails.

Best regards,
Jakob

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

dot at dotat

Aug 6, 2008, 6:01 AM

Post #2 of 6 (5007 views)
Permalink

Re: Problem with servers not recognizing srs [In reply to]

On Wed, 6 Aug 2008, Jakob Jensen wrote:

> Return-Path:SRS0=HHHH=YY=origdomain.com=user [at] forward
>
> My problems is that, when the server I forward to receives the mail the
> SPF check is done on the original domain (origdomain.com) and not the
> domain I added to the Return-Path (forward.com) and the mail is
> classified as spam.

Sounds like the SPF-vs-SenderID incompatibility at work.

Tony.
--
f.anthony.n.finch <dot [at] dotat> http://dotat.at/
FORTIES CROMARTY FORTH: NORTHEASTERLY 3 OR 4 INCREASING 5 OR 6, BECOMING
CYCLONIC FOR A TIME IN FORTIES. SLIGHT OR MODERATE. RAIN OR SHOWERS. MODERATE
OCCASIONALLY POOR.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

hannah at schlund

Aug 6, 2008, 6:19 AM

Post #3 of 6 (4999 views)
Permalink

Re: Problem with servers not recognizing srs [In reply to]

Hi!

On Wed, Aug 06, 2008 at 02:48:11PM +0200, Jakob Jensen wrote:
>I don't know if this is the right place to ask this question, but I couldn't find any other place

>I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user [at] origdomain the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user [at] forward

Does your server only change the Return-Path *header*, or also the
MAIL FROM in the SMTP dialogue? (It should do the latter, Return-Path
should only be added in the *final* delivery step and *then* be set from
the envelope sender, i.e. the MAIL FROM as it was on the last hop.)

>[...]

Kind regards,

Hannah.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

jakob at 123hjemmeside

Aug 6, 2008, 6:36 AM

Post #4 of 6 (5001 views)
Permalink

RE: Problem with servers not recognizing srs [In reply to]

Yes, the SMTP dialogue seems to be correct as well

from my mail.log:
from=<SRS0=HHHH=YY=origdomain.com=user [at] forward>

regards,
Jakob

-----Original Message-----
From: Hannah Schroeter [mailto:hannah [at] schlund]
Sent: 6. august 2008 15:20
To: srs-discuss [at] v2
Subject: Re: [srs-discuss] Problem with servers not recognizing srs

Hi!

On Wed, Aug 06, 2008 at 02:48:11PM +0200, Jakob Jensen wrote:
>I don't know if this is the right place to ask this question, but I couldn't find any other place

>I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user [at] origdomain the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user [at] forward

Does your server only change the Return-Path *header*, or also the
MAIL FROM in the SMTP dialogue? (It should do the latter, Return-Path
should only be added in the *final* delivery step and *then* be set from
the envelope sender, i.e. the MAIL FROM as it was on the last hop.)

>[...]

Kind regards,

Hannah.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

stuart at bmsi

Aug 6, 2008, 6:48 AM

Post #5 of 6 (4998 views)
Permalink

Re: Problem with servers not recognizing srs [In reply to]

Jakob Jensen wrote:
> I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user [at] origdomain the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user [at] forward
>
> My problems is that, when the server I forward to receives the mail the SPF check is done on the original domain (origdomain.com) and not the domain I added to the Return-Path (forward.com) and the mail is classified as spam.
>
It sounds like you are dealing with a brain-dead recipient that fell for
the M$ stuff:

http://www.openspf.org/SPF_vs_Sender_ID

The Sender-ID spec says to interpret SPF records (which apply to SMTP
envelope) as if they were Sender-ID records (which apply to the mail
header). If you can't get the recipient to fix their server, the
work-around is to add a Resent-Sender header field. This is the
highest priority header field considered by the (patented) PRA algorithm.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

hannah at schlund

Aug 6, 2008, 6:52 AM

Post #6 of 6 (5009 views)
Permalink

Re: Problem with servers not recognizing srs [In reply to]

Hi!

On Wed, Aug 06, 2008 at 03:36:03PM +0200, Jakob Jensen wrote:
>Yes, the SMTP dialogue seems to be correct as well

>from my mail.log:
>from=<SRS0=HHHH=YY=origdomain.com=user [at] forward>

Ah, ok, just wanted to be sure. Then probably the interpretation of the
other respondents stands, alas.

>regards,
>Jakob

Kind regards,

Hannah.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads