[Pkg-exim4-users] exim4 and forwards breaks mails from gmail

[Norbert Preining]

Hi everyone,
(please Cc)

I am seeing the following problem:
* Debian/squeeze, exim 4.80-7+deb7u on my own server
* some emails are forwarded with .forward mechanism to
a server that checks spf
* mails forwarded are rejected with
According to the respective mail admins at the rejecting server
(I have good contact with them), they are just following strictly
the spf records of google.

Does that mean that gmail *cannot* be forwarded?

Is this a limitation of exim(4) in squeeze, is there anything that
can fix this problem?

I know that using procmail instead of .forward solves the problem
by rewriting the env-from part, but I don't want to force other
users to do the same.

Is there any other way to fix this?

Thanks (and again, please Cc...)

Norbert

------------------------------------------------------------------------
PREINING, Norbert http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------

[Norbert Preining]

Post by Norbert Preining
Is this a limitation of exim(4) in squeeze, is there anything that
can fix this problem?

No. You just hit a point where SPF is broken.

Umpf, thanks! Not very happy about that.

SO I have to inform my users:
* check your final destination whether it doe sstrict SPF checks
* if yes, use procmail instead of .forward

Argg... so much to learn. Thanks a lot

Norbert

------------------------------------------------------------------------
PREINING, Norbert http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------

[Adi Kriegisch]

Hey!

Post by Norbert Preining

Post by Norbert Preining
Is this a limitation of exim(4) in squeeze, is there anything that
can fix this problem?

No. You just hit a point where SPF is broken.

Umpf, thanks! Not very happy about that.

Hmm... one could debate wether it is SMTP that is broken, but fixing
something broken by breaking it again does not help either.

Post by Norbert Preining
* check your final destination whether it doe sstrict SPF checks
* if yes, use procmail instead of .forward

Actually I would not check the destination but the sender's SPF record;
this is the relevant one: with SPF the recipient of an email is able to
verify the sending server. In your case there is a mail bastion (tuvok)
in between that refuses to accept those mails.

-- Adi

[Norbert Preining]

Post by Adi Kriegisch
Actually I would not check the destination but the sender's SPF record;

Well, no, because we don't know all future senders, but we know the
receiver ;-)

ANyway, I am going for the .procmailrc path to avoid the pain of
introducing SRS to get this working. Hope I can convince all my
users to do the same.

Norbert

------------------------------------------------------------------------
PREINING, Norbert http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------

[Jasper Wallace]

Post by Norbert Preining

Post by Norbert Preining
Is this a limitation of exim(4) in squeeze, is there anything that
can fix this problem?

No. You just hit a point where SPF is broken.

Umpf, thanks! Not very happy about that.
* check your final destination whether it doe sstrict SPF checks
* if yes, use procmail instead of .forward
Argg... so much to learn. Thanks a lot

You need to do SRS, you don't control the gmail.com domain so you can't
send email from it...

Post by Norbert Preining
Norbert
------------------------------------------------------------------------
PREINING, Norbert http://www.preining.info
JAIST, Japan TeX Live & Debian Developer
GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
------------------------------------------------------------------------
_______________________________________________
Pkg-exim4-users mailing list
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-exim4-users