Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Mail Security: SMTP, POP3, Antispam and Antivirus

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-19-2009, 10:37 AM
Junior Member
 
Join Date: Dec 2008
Posts: 4
Default SPF check errors

Hi,

we are evaluating the Astaro Mail Gateway behind a ASG. The AMG is receiving all the email through a NAT rule on the ASG passing smtp ports to AMG. The ASG is still relaying all the mail to outside.
No problem here.
The problem is that some incoming mail is getting rejected by SPF with error:
"(our ext IP) is not allowed to send mail from (some ext domain)"

witch in fact is true but it doesn't make sense.

Than I notice that in "Mail Manager" - "SMTP Log" all messages seem to come from our ext. IP.
This cant be right.

I'm out of ideas.

Thanks in advance.
Reply With Quote
  #2 (permalink)  
Old 06-19-2009, 11:03 AM
Junior Member
 
Join Date: Dec 2008
Posts: 4
Default

Problem solved.

The "FULL NAT" rule was the culprit.
We modified it to DNAT because we already have a Masquerade rule in place and is now OK.

Last edited by edisoft; 06-19-2009 at 11:07 AM.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 12:03 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.