Re: SPF logic

From: Jim Pazarena <fquest_at_paz.bz>
Date: Mon, 08 Dec 2025 23:01:51 UTC
oh my goodness. I posted to the wrong newsgroup.
I am so sorry for this wasted space!


On 2025-12-08 2:19 PM, Doug Hardie wrote:
>> On Dec 8, 2025, at 13:59, Jim Pazarena <fquest@paz.bz> wrote:
>>
>> I set up SPF for my domains, which has been in place for quite a while.
>>
>> I recently set up incoming SSL/TLS + authentication for customers' emails.
>>
>> I am finding now that remotely connected customers (such as those away on holidays) are being denied by the SPF rules because they are no longer on a local subnet, and now filtering in to the SPF rules.
>>
>> I am wondering what logic I need to put in place to let them bypass the SPF if they come in by local SSL authentication ? I can't quite reason it out. Thanks for any suggestions/advice.
> 
> 
> The solution to this will be dependent on the MTA you are using.  You should probably ask on the maillist for that MTA.
> 
> -- Doug
> 

-- 
Jim Pazarena         fquest@paz.bz
Haida Gwaii - British Columbia - Canada