lyle - i don't think this would work in my context.

what i've got is 120+ websites, all with contact forms. not all the site 
owners use our surgemail service, but i guess that doesn't matter.

the hostname for the old server is 'main'.

when the code that processes the form (some is perl, some uses php 
mail), the return path is set (i guess by postfix) to 
HIDDEN@main.advwebsys.com - wwwrun is the user account that apache runs as.

i've been testing using the linux command line mail utility as root. 
perhaps that's the problem.

i need to think this through a bit more.....

david


On 7/30/2014 8:25 PM, Lyle Giese wrote:
> I would turn on SMTP Auth in Postfix and forget about the spf 
> records.  Then relay via Surgemail.  Done deal.
>
> Lyle
>
>
>
> On 07/30/14 15:59, David Camm wrote:
>> i'm in the process of bringing a new web server online. os is ubuntu 
>> 14.04.1 lts and the installed mta is postfix.
>>
>> postfix now requires that the server hostname be an fqdn (fully 
>> qualified domain name), so i've made it newmain.advwebsys.com
>>
>> in my zone file for advwebsys.com i have an spf record like so:
>>
>>                IN TXT  "v=spf1 a mx ipv4:x.x.x.x  -all"
>>
>> when i try to send mail to myself from the new server, i get:
>>
>> Received-SPF: none (No spf1 record for (newmain.advwebsys.com) ) 
>> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
>> x-ip-name=
>> X-Default-Received-SPF: fail (Last token {-all} (res=FAIL)) 
>> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
>> x-ip-name=;
>>
>> newmain has an A record in the zone file.
>>
>> can i add:
>>
>> newmain   IN TXT "v=spf1 a -all"
>>
>> in order to make this work?
>>
>> btw, newmain's ip address is defined in g_relay_allow_ip.
>>
>> david camm
>> president
>> advanced web systems
>> keller, tx
>>
>>
>>
>
>
>