asked on

Enable SPF on IMSVA

Follow the instruction to enable spf check on my Trend Micro IMSVA. There is no error during restart but the log doesn't show with "SPFPolicyd”. I also double check and the spoof email can't be blocked. Any idea ??

It is a Centos OS. Linux version 2.6.32-573.3.1.el6.x86_64 (mockbuild@c6b8.bsys.dev.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-16) (GCC) ) #1 SMP Thu Aug 13 22:55:16 UTC 2015
C--temp-SOP_IMSVA_9.0_SPF.PDF
C--temp-main.cf.txt
C--temp-master.cf.txt

arnold

What about maillog, does it have an error that it
You are missing the sender restriction entry checks that includes spfpolicyd.........

Please double check the configuration document to make sure you followed it to complete and restart the postfix service, service postfix restart
Look at the /var/log/maillog to see what it reports....

AXISHK

ASKER

Already added an entry in master.cf

I have uncommented 725 - 727 and modifed it.

725 smtpd_sender_restrictions =
726 check_policy_service inet:127.0.0.1:999,check_policy_service unix:private/SPFPolicyd
727 SPFPolicyd_time_limit = 3600
728
729 smtpd_sender_restrictions = check_sender_access hash:/opt/trend/imss/postfix/etc/postfix/imsa_sender_list, check_policy_service
730 inet:127.0.0.1:999, reject_unknown_sender_domain 127.0.0.1:999_time_limit = 3600

AXISHK

ASKER

Seem fine now.

One more question. If the sender side doesn't define SPF record in their domain, will our postfix receive it in this case ?

Thx.

arnold

If the sender's domain have no spf defined, your SPF check will have nothing to do. Often the SPF check is for your own domain to not be spoofed/spammed....

AXISHK

ASKER

Do you mean SPF will not a domain check for incoming mails (whether spf is defined or not) ? It only check incoming mails with domain which is the same as our company domain. Correct ?

Thx

ASKER CERTIFIED SOLUTION

arnold

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial