Sunday, March 05, 2006


So, I finally ran into my first rejected mail due to SPF:

-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
B79A65361 1886 Sat Mar 4 16:20:14
(host[] said: 550-5.7.1 {mx020} The recipient does not
accept mails from '' over foreign mailservers.
550-5.7.1 According to the domain's SPF record your host '' is not
a designated sender. 550 5.7.1 ( ) (in reply to RCPT TO command)) is still hosted on SpeakEasy's DNS servers (I didn't get around yet to change that to and run secondary on ns1/
SpeakEasy doesn't expose SPF records to their DNS customers. According to the SPF record

v=spf1 ip4: ip4: ip4: ip4: mx ptr ~all

as published by SpeakEasy results in a "softfail" condition for SPF. In other words GMX refuses mail on softfail. Niiiice...

The remedy is easy:
Add relayhost=[] in /etc/postfix/, restart postfix, done.

No comments: