Mailing List Archive

Problem with servers not recognizing srs
Hi,

I don't know if this is the right place to ask this question, but I couldn't find any other place

I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user@origdomain.com the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user@forward.com

My problems is that, when the server I forward to receives the mail the SPF check is done on the original domain (origdomain.com) and not the domain I added to the Return-Path (forward.com) and the mail is classified as spam.

Can anybody point me in the direction of what I have done wrong, or tell me if I have just misunderstood the point of SRS?

I'm using postfix and ASSP to forward the mails.

Best regards,
Jakob


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com
Re: Problem with servers not recognizing srs [ In reply to ]
On Wed, 6 Aug 2008, Jakob Jensen wrote:

> Return-Path:SRS0=HHHH=YY=origdomain.com=user@forward.com
>
> My problems is that, when the server I forward to receives the mail the
> SPF check is done on the original domain (origdomain.com) and not the
> domain I added to the Return-Path (forward.com) and the mail is
> classified as spam.

Sounds like the SPF-vs-SenderID incompatibility at work.

Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
FORTIES CROMARTY FORTH: NORTHEASTERLY 3 OR 4 INCREASING 5 OR 6, BECOMING
CYCLONIC FOR A TIME IN FORTIES. SLIGHT OR MODERATE. RAIN OR SHOWERS. MODERATE
OCCASIONALLY POOR.


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com
Re: Problem with servers not recognizing srs [ In reply to ]
Hi!

On Wed, Aug 06, 2008 at 02:48:11PM +0200, Jakob Jensen wrote:
>I don't know if this is the right place to ask this question, but I couldn't find any other place

>I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user@origdomain.com the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user@forward.com

Does your server only change the Return-Path *header*, or also the
MAIL FROM in the SMTP dialogue? (It should do the latter, Return-Path
should only be added in the *final* delivery step and *then* be set from
the envelope sender, i.e. the MAIL FROM as it was on the last hop.)

>[...]

Kind regards,

Hannah.


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com
RE: Problem with servers not recognizing srs [ In reply to ]
Yes, the SMTP dialogue seems to be correct as well

from my mail.log:
from=<SRS0=HHHH=YY=origdomain.com=user@forward.com>

regards,
Jakob


-----Original Message-----
From: Hannah Schroeter [mailto:hannah@schlund.de]
Sent: 6. august 2008 15:20
To: srs-discuss@v2.listbox.com
Subject: Re: [srs-discuss] Problem with servers not recognizing srs

Hi!

On Wed, Aug 06, 2008 at 02:48:11PM +0200, Jakob Jensen wrote:
>I don't know if this is the right place to ask this question, but I couldn't find any other place

>I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user@origdomain.com the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user@forward.com

Does your server only change the Return-Path *header*, or also the
MAIL FROM in the SMTP dialogue? (It should do the latter, Return-Path
should only be added in the *final* delivery step and *then* be set from
the envelope sender, i.e. the MAIL FROM as it was on the last hop.)

>[...]

Kind regards,

Hannah.


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com



-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com
Re: Problem with servers not recognizing srs [ In reply to ]
Jakob Jensen wrote:
> I have setup SRS on one of my mail servers that is used for email forwarding. It seems the header is correctly rewritten. In a email to user@origdomain.com the header is expanded with a Return-Path:SRS0=HHHH=YY=origdomain.com=user@forward.com
>
> My problems is that, when the server I forward to receives the mail the SPF check is done on the original domain (origdomain.com) and not the domain I added to the Return-Path (forward.com) and the mail is classified as spam.
>
It sounds like you are dealing with a brain-dead recipient that fell for
the M$ stuff:

http://www.openspf.org/SPF_vs_Sender_ID

The Sender-ID spec says to interpret SPF records (which apply to SMTP
envelope) as if they were Sender-ID records (which apply to the mail
header). If you can't get the recipient to fix their server, the
work-around is to add a Resent-Sender header field. This is the
highest priority header field considered by the (patented) PRA algorithm.


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com
Re: Problem with servers not recognizing srs [ In reply to ]
Hi!

On Wed, Aug 06, 2008 at 03:36:03PM +0200, Jakob Jensen wrote:
>Yes, the SMTP dialogue seems to be correct as well

>from my mail.log:
>from=<SRS0=HHHH=YY=origdomain.com=user@forward.com>

Ah, ok, just wanted to be sure. Then probably the interpretation of the
other respondents stands, alas.

>regards,
>Jakob

Kind regards,

Hannah.


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1129/=now
RSS Feed: https://www.listbox.com/member/archive/rss/1129/
Powered by Listbox: http://www.listbox.com