[lug] SPF filtering on outbound recipient

[Jed S. Baer]

On Wed, 8 Feb 2017 15:52:54 -0700
Zan Lynx wrote:

> If the TLD does have a SPF then the SPF must list the library's mail
> system as a valid sender. If it isn't listed as a valid sender then all
> SPF checks (SpamAssassin and others) will believe that the email is
> faked.
> 
> I see the record is:
> > cotse.net.		900	IN	TXT	"v=spf1 +mx
> > ptr:packetderm.com a:out.packetderm.com ~all"
> 
> I don't think any of those are Jefferson County Library.

Jefferson County Library is jeffcolibrary.org. There is an SPF record for
them, but that's not operative here.

Their domain isn't in question. They are generating e-mail to me, and
blocking their own outbound mail, based on the recipient domain,
jbaer.cotse.net, lacking the SPF record.