08-26-2019 06:03 AM
Dear all
İ configured spf and it seems work properly for now. Let me give you brief summery
1. Created SPF quarantine
2. Enabled SPF in mail flow policy default Policy parameters(Conformance Level-SPF, Downgrade PRA verification-NO, HELO Test-ON)
3.Created content filter to send Failed spf verification to quarantine.
When i looked at some logs i observed that although mailfromidentity Pass but HELO test Softfail, email is send to SPF quarantine. My question is that what is the recommended choice for HELO Test ? ON or OFF ?
Solved! Go to Solution.
08-27-2019 11:24 AM
Hello,
The SPF record lookup is done using the mail-from domain. So, if the envelope sender address is test@domain.com then you would want to look at the SPF record for domain.com to see if it's configured properly, as they would need to be including the sending host mx.example.com in it. If it is misconfigured then there's nothing you're able to do about that since you do not control their DNS. You would need to contact them so that they can fix it on their end.
If you can provide more details I can try to help confirm.
Thanks!
-Dennis M.
08-26-2019 07:36 AM
Hello,
Most people are probably not going to have the HELO SPF record configured properly if at all, so my personal opinion would be that it's not necessary. I'd also recommend adding in DKIM and DMARC verification when possible.
If you wanted to just act on the mail-from within the filter, you could instead configure a message filter instead of a content filter, as with the message filter you have the ability to choose.
Thanks!
-Dennis M.
08-26-2019 10:37 PM
08-27-2019 11:24 AM
Hello,
The SPF record lookup is done using the mail-from domain. So, if the envelope sender address is test@domain.com then you would want to look at the SPF record for domain.com to see if it's configured properly, as they would need to be including the sending host mx.example.com in it. If it is misconfigured then there's nothing you're able to do about that since you do not control their DNS. You would need to contact them so that they can fix it on their end.
If you can provide more details I can try to help confirm.
Thanks!
-Dennis M.
08-27-2019 11:44 AM
Thank you Dennis. I will send email to them to add their spf records
08-27-2019 12:34 PM
You're very welcome! I'm glad that I was able to assist. :)
-Dennis M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide