The From you show is inserted when the script does not specify a 
different From.  If the script sends a From field, then that is what is 
used.  Using an authenicated smtp session, (depending on your Surgemail 
options) bypasses the need for the From to be a valid account on the 
mail server.

Even the mail command support setting the from field with -r

Lyle

On 7/31/2014 4:49 PM, David Camm wrote:
> lyle - i don't think this would work in my context.
>
> what i've got is 120+ websites, all with contact forms. not all the 
> site owners use our surgemail service, but i guess that doesn't matter.
>
> the hostname for the old server is 'main'.
>
> when the code that processes the form (some is perl, some uses php 
> mail), the return path is set (i guess by postfix) to 
>HIDDEN@@main.advwebsys.com - wwwrun is the user account that apache 
> runs as.
>
> i've been testing using the linux command line mail utility as root. 
> perhaps that's the problem.
>
> i need to think this through a bit more.....
>
> david
>
>
> On 7/30/2014 8:25 PM, Lyle Giese wrote:
>> I would turn on SMTP Auth in Postfix and forget about the spf 
>> records.  Then relay via Surgemail.  Done deal.
>>
>> Lyle
>>
>>
>>
>> On 07/30/14 15:59, David Camm wrote:
>>> i'm in the process of bringing a new web server online. os is ubuntu 
>>> 14.04.1 lts and the installed mta is postfix.
>>>
>>> postfix now requires that the server hostname be an fqdn (fully 
>>> qualified domain name), so i've made it newmain.advwebsys.com
>>>
>>> in my zone file for advwebsys.com i have an spf record like so:
>>>
>>>                IN TXT  "v=spf1 a mx ipv4:x.x.x.x  -all"
>>>
>>> when i try to send mail to myself from the new server, i get:
>>>
>>> Received-SPF: none (No spf1 record for (newmain.advwebsys.com) ) 
>>> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
>>> x-ip-name=
>>> X-Default-Received-SPF: fail (Last token {-all} (res=FAIL)) 
>>> client-ip=72.249.173.30; envelope-from=HIDDEN@ewmain.advwebsys.com>; 
>>> x-ip-name=;
>>>
>>> newmain has an A record in the zone file.
>>>
>>> can i add:
>>>
>>> newmain   IN TXT "v=spf1 a -all"
>>>
>>> in order to make this work?
>>>
>>> btw, newmain's ip address is defined in g_relay_allow_ip.
>>>
>>> david camm
>>> president
>>> advanced web systems
>>> keller, tx
>>>
>>>
>>>
>>
>>
>>
>
>