How to configure SPF and DMARC for satellite hosts?

0 like 0 dislike
11 views
If you send directly to mail relay, then everything works fine. All the checks pass, the spam does not fly away.

Delivered-To: 102@host.me Received: by with SMTP id 10.100.182.171 t40csp2626933pjb; Thu, 26 Apr 2018 10:46:48 -0700 (PDT) X-Google-Smtp-Source: AIpwx4/9tRGhIYiEqgkaJpGdNZz2kdBMwayri8Jw1fpqbkxwwi7fvsresujwgcgujo1ldjn0b58f X-Received: by with SMTP id 10.46.151.151 y23mr16275963lji.52.1524764808385; Thu, 26 Apr 2018 10:46:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1524764808; cv=none; d=google.com; s=arc-20160816; b=cyB04HBw9TTTJAWwuEhT/qR6+lMFpIDYunmeNywATk5Ty2a3bmS9lSlIT8xya1wvwa ouDJ2zRi8z4RuVurYoZqQGO+btm0R9dHvAUfV6w/WPBofgI8Kl1RaUvHZ/lONaOE3Bze epnp6+EXzmflmdMjsrhUb3c8Rmx+i91a+hZcZeGM5/qTuaeyzxbDM7TGnyWKkIMTrJ0i VD/HHYS3hhQkFKpEZpzlcI/+Z0zVRNT0pW7RLufAP8vTPWcncUiYaw2Nl7mjcortf3vb qyy8EdQreIt8bnzBZASwKR2gjTyRtrN94hpyxete2f3bkh6ro7axkg8o2rbxhaq3cxip qYlg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=date:from:message-id:to:subject:dkim-signature :arc-authentication-results; bh=8RMrWM7Bx0xwYLRGJR8xwS45EuxVliASew9xwrvcuwk=; b=NvKM7lcKjS2xzOCgY3qqBp6s2tTTlqof7pk71kyab+EJeztH3H8ZODJw9OkV4qmnv+ lyiUK7imMxEyrfERNNqcx9ocXV62emtQzac6ef9alwxlfx/jf49w0tsp9ylvJAZO/4LS nPZZ1pGZoaIZ9CmuRHwE5GHfmXLxHx1Lmphqzczd3thhfwoxkus7njsmvseouikv6zwh HLjCVyPYIPoX/nF3g3kN/hSZtvKLJ28pQ8joxBofX/IBAuklSX4UGLez2Ibrb+bhrvib p8z/3/AOntN5HJ/KmHJU5KvX+fm8H/gB5KyZa2ii8oP8ItyArsaU6Rtyg9bUp31k+jCY 5+mg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@git.host.me header.s=mail header.b=FNRfL+sE; spf=pass (google.com: domain of root@git.host.me 119.176.231.226 designates as permitted sender) smtp.mailfrom=root@git.host.me; dmarc=pass (p=NONE, sp=NONE dis=NONE) header.from= " git."host.me Return-Path: Received: from git.host.me ([119.176.231.226]) by mx.google.com with ESMTPS id e8si3825617ljg.267.2018.04.26.10.46.47 for <102@host.me> (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 26 Apr 2018 10:46:48 -0700 (PDT) Received-SPF: pass (google.com: domain of root@git.host.me 119.176.231.226 designates as permitted sender) client-ip=119.176.231.226; Authentication-Results: mx.google.com; dkim=pass header.i=@git.host.me header.s=mail header.b=FNRfL+sE; spf=pass (google.com: domain of root@git.host.me 119.176.231.226 designates as permitted sender) smtp.mailfrom=root@git.host.me; dmarc=pass (p=NONE, sp=NONE dis=NONE) header.from= " git."host.me DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=git.host.me; s=mail; h=Date:From:Message-Id:To:Subject:Sender:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=8RMrWM7Bx0xwYLRGJR8xwS45EuxVliASew9xwrvcuwk=; b=FNRfL+sEpXPFi8PuUR2fyt9Bkw 18AfHsXg6xsKQaMj5m3qXoe8vrvbf18Hpwzh8myimbkxdrisigyxorg4xmxfyij7wyfcnupiflydf 3kaIcIDTC0pBkbPCfyidhxxk1BwQ2jMcaztdct8ae4gisxtgg3hy7o3ww8knbtau9vrk=; Received: from root by git.host.me with local (Exim 4.89) (envelope-from ) id 1fBkyj-0007hW-Hr for 102@host.me; Thu, 26 Apr 2018 23:46:45 +0600 Subject: Test Subject4 To: <102@host.me> X-Mailer: mail (GNU Mailutils 3.1.1) Message-Id: From: Networks Date: Thu, 26 Apr 2018 23:46:45 +0600


But if sending from satellites which is sent through this relay, SPF and DMARC are not working.

Delivered-To: 102@host.me Received: by with SMTP id 10.100.182.171 t40csp2596843pjb; Thu, 26 Apr 2018 10:18:00 -0700 (PDT) X-Google-Smtp-Source: AB8JxZqHS5rxP0CP+5cReVbLQ0eSEuquzFPakXwEixRr2iKnnaxqj1129rfcrq+AVU4/mAtaffWW X-Received: by with SMTP id 10.46.150.137 q9mr8330222lji.35.1524763080357; Thu, 26 Apr 2018 10:18:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1524763080; cv=none; d=google.com; s=arc-20160816; b=lrfP7Il7GdHHm/lCC6pOtDfbB/tzSi2miDZYJs5NS9OmBhw2NXx6+Fn2SwpQmXTtYA ahLZn6Y46Uy1LxslbXevD7VVIhh89O8or/P5etNOlVHdNPr5SZdi0JsWT785sfuXcihu m1zJhZ0le6llShfYniO3GaDE30gZgP/l97i7u8xM+15wQpU3h1JCpvgTBrzDz/Nde0Nc 8DCqpPgb1x0e17ezzG/+oNEhsHyZ6DkwSfSJaTXUs9thMnbgQFA2xwyfzdv0lhahvbie g2mk/LEHgzFjAXICLwCcXYOnc0lT07lfHqY41xpiinqqcknv6wsr7v0woh5gwur0yqjs 8aQw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=date:from:message-id:to:subject:dkim-signature :arc-authentication-results; bh=yH/vUyKuWBPNLRqqzCex1QTHbG30THc7TAL6mfazzhc=; b=F+VqDKrcESEUQT4Xg9mhU0sm88mezc4ZRqfbl9yoqa/2Bbyfm4Nv17jSGVsQST/kDI XZXhX7bUkR/Qz2B771K7oQNl2rMrL6LNnr6W3jfR7mNl5q2o33n4kp/c6n/Nyy4vcVa3 d0PY6WbCpAjeSG2eZhBanTWP6x9bnu8Nampb2hecjiwqwijsltmgb8zr6wmsszuyjzty 75bfPNPn1uxvs8/eCtgx0kcn93u/ESty+98HEl2Jk4Kph9bODahOTk+AGfdGnM9XKx/a KJ8s10K8oK+ENuewofwxQSrO954yhIQd1q2oFcKuIYz7rvcqiayqvnwlscvlvj9jlxk5 eL5Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@git.host.me header.s=mail header.b=nMYm74MJ; spf=neutral (google.com: 119.176.231.226 is neither permitted nor denied by best guess record for domain of root@postgres.inf) smtp.mailfrom=root@postgres.inf Return-Path: Received: from git.host.me ([119.176.231.226]) by mx.google.com with ESMTPS id 7-v6si7910546lft.38.2018.04.26.10.18.00 for <102@host.me> (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 26 Apr 2018 10:18:00 -0700 (PDT) Received-SPF: neutral (google.com: 119.176.231.226 is neither permitted nor denied by best guess record for domain of root@postgres.inf) client-ip=119.176.231.226; Authentication-Results: mx.google.com; dkim=pass header.i=@git.host.me header.s=mail header.b=nMYm74MJ; spf=neutral (google.com: 119.176.231.226 is neither permitted nor denied by best guess record for domain of root@postgres.inf) smtp.mailfrom=root@postgres.inf DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=git.host.me; s=mail; h=Date:From:Message-Id:To:Subject:Sender:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=yH/vUyKuWBPNLRqqzCex1QTHbG30THc7TAL6mfazzhc=; b=nMYm74MJpGXuswasjPd9bBZ9jf CEuuqQEj6LLLUUUMVwsGFHz4htEILACtc2my2p4euvc0regjoykl5qsetl33fbttlhj3z0z0gjbcn WlGTnol6YR6IgHwnh2Fh8IidTLAAayiq44ucw0ditde0musm22ioi1xlv8cjnuib8wds=; Received: from postgres.inf.host.me ([192.168.1.204] helo=postgres.inf) by git.host.me with esmtp (Exim 4.89) (envelope-from ) id 1fBkWs-0006W6-1i for 102@host.me; Thu, 26 Apr 2018 23:17:58 +0600 Received: from root by postgres.inf with local (Exim 4.89) (envelope-from ) id 1fBkWs-00023Q-00 for 102@host.me; Thu, 26 Apr 2018 23:17:58 +0600 Subject: Test Subject3 To: <102@host.me> X-Mailer: mail (GNU Mailutils 3.1.1) Message-Id: From: root@postgres.inf Date: Thu, 26 Apr 2018 23:17:57 +0600


in exim to tweak or what headers to replace to provera SPF and DMARC checked by the host that directly sends the mail, not sattelite?
by | 11 views

2 Answers

0 like 0 dislike
You have for the domain postgres.inf generally not configured SPF you SPF record, then publish.

SPF checks the domain of the envelope-from, this is the address that the email is visible in the Return-Path header
by
0 like 0 dislike
by

Related questions

0 like 0 dislike
4 answers
asked Mar 20, 2019 by Pas
0 like 0 dislike
1 answer
asked Jun 12, 2019 by shambler81
0 like 0 dislike
3 answers
110,608 questions
257,186 answers
0 comments
33,924 users