Re: Mail forwarding issues and SPF
On Mon, 2010-06-14 at 15:57 -0500, Bruno Wolff III wrote:
On Mon, Jun 14, 2010 at 14:25:42 -0600,
Stephen John Smoogen <smooge(a)gmail.com> wrote:
> Red Hat IT forwarded an issue to me today about a recipient of
> @fedoraproject.org having an issue with addresses from @redhat.com.
> The issue is that in forwarding email addresses we aren't rewriting
> headers so it looks like we are sending redhat.com addresses from a
> non Red Hat server. The suggested fix is to have procmail rewrite the
> envelope for these to say soemthing like From
> noreply(a)fedoraproject.org so that SPF and similar filters can work.
That will break other things. SPF and forwarding don't go well together.
If you really need to do it, there is supposed to a standard for rewriting
the envelope sender address that could be used to forward bounces back
to redhat.com via fedoraproject.org.
The recipient could also relax the checks on their end and accept email
from fedoraproject.org servers.
I just read that standard - it could be the single oddest thing I ever
read and I'm positive we do not want to implement it.
I like mdomsch's idea that @redhat.com should change from -all to ~all
-sv