[Linux-aus] SPF problems too

[Russell Coker]

On Fri, 15 Jan 2016 03:27:59 AM Stephen Rothwell wrote:
> On Fri, 15 Jan 2016 03:11:36 +0000 Russell Coker <russell at coker.com.au> 
wrote:
> > I tried to send a mail to the council (at the address advertised on the
> > web site) about the DKIM/SPF issues.  I have attached the bounce.  It
> > seems that the LA servers are broken regarding SPF.
> 
> This is because SPF is fundamentally broken in the case an email is
> forwarded from one server to another (as happened here).

When someone runs a server that is designed to accept forwarded mail from 
another server which doesn't do SRS then they should do one of two things:

1)  Whitelist that server.
2)  Not implement SPF checks.

Someone decided to implement SPF checks on the second server while not 
bothering to whitelist the first server.

SPF is not fundamentally broken (SRS works well if you care to implement it).  
The Linux Australia servers are fundamentally broken with regards to SPF.

If fixing SPF in this regard is difficult then someone could change the LA web 
site to give the second address.