SPF will not work in that case. At the time the SPF checks are done, we haven't yet parsed the headers to determine the original sending IP. If the gateway MTA is an IronPort also, you can enable SPF at the gateway, which will insert Received-SPF: headers, then use SPF filter conditions on the next hop.
Karl Young
Product Support Engineer
IronPort Systems
Hi Everyone,
A new question about Incoming Relays and SPF Testing. Currently we have 1 incoming relay setup on our IronPort and we are able to parse emails for SBRS information, but can the same thing be done for SPF testing?
Just trying to close a small loophole in our filters. :)
