Forum OpenACS Q&A: Re: acs-mail-lite and spam control (SPF)

3: Re: acs-mail-lite and spam control (SPF) (response to 2)

Posted by Michael Totschnig on 09/03/08 06:05 PM

Thank you Patrick for your answer.
But the problem is that the mail that goes out of my system seems to have an envelope sender set to the email of the user writing the bulk mail message. That is at least what the SPF error report says:

--
< some.foreign.domain > rejected a message that claimed an envelope sender address of < mailto:user@email.address >.

< some.foreign.domain > received a message from < my.domain > (< ip.address >) that claimed an envelope sender address of < mailto:user@email.address >.

However, the domain < foreign.domain > has declared using SPF that it does not send mail through < my.domain > (< ip.address >). That is why the message was rejected.
--

Obviously I have no influence on some.foreign.domain's SPF record.
Is there something wrong on my setup, or is the SPF system flawed?

Regards,

Michael

4: Re: acs-mail-lite and spam control (SPF) (response to 3)

Posted by Patrick Giagnocavo on 09/04/08 01:26 AM

SPF is doing what it is supposed to. What I recommend you do, is to find the code and change it to suit your purposes.

For instance, you could programmatically change mailto:patrick@zill.net (my email address) to mailto:bounce-patrick+zill.net@yourdomain.com, then set up your mail server to collect all messages addressed to bounce* at yourdomain.com to go into a mailbox that you monitor to ensure that users are not abusing your server.

5: Re: acs-mail-lite and spam control (SPF) (response to 4)

Posted by Michael Totschnig on 09/04/08 11:23 AM

This is an interesting suggestion, but shouldn't there be a possibility to set the envelope sender to mydomain.com, and keep the user's address in the From header?