Messaging Gateway

  • Private Community
 View Only

  • 1.  SPF softfail verdict behaviour

    Posted Jun 21, 2010 07:18 PM

    Hi there,

    Can anyone tell me what verdict the Brightmail reaches when a domain has a softfail (~all) instead of a hardfail.
    Does it still class the mail as failing the sender authentication lookup?
    Or does it let it straight through?




  • 2.  RE: SPF softfail verdict behaviour

    Posted Jun 21, 2010 07:35 PM

    Think I just found a KB showing that the email is allowed:

    http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2008060312334254

    "Domains that have published their spf records with the last directive of "~all" (SoftFail) or "?all" (Neutral) will not trigger the SPF Authentication policy action when spoofed. Only those domains that have published their spf records with the last directive of "-all" (hard Fail) will trigger the SPF Authentication policy action when spoofed. This behavior is by design and in compliance with SPF specification."