[BCLUG] Interesting email about domain expiring - SPF vs SPAM question

[BCLUG]

Ian Samuel wrote on 2022-08-19 07:17:

> I've lost track - because 1/2 of these messages are ending up in Junk 
> for me.

Oh no!  Glad you found us eventually.



> but it needs to be stressed that SPF provides a suggestion to other mail 
> servers that the /_SMTP _//_envelope sender_/ (not the From: header 
> field) address can only originate from listed IPs. SPF does not prevent 
> spoofing of a From: header, you need DKIM for that. Of course what mail 
> servers choose to do (or not do) with that information is up to their Admin.

I have DKIM, and tweaked my DMARC record(s).  I think I need to review 
postfix's (SMTP in general) envelope vs From.



> Some mail servers will add the envelope sender to the mail message 
> headers, but many will not.

Know off the top of your head if postfix (mail_version = 3.4.13) 
rewrites envelope sender by default?



Thanks for chiming in!