[opendmarc-users] How to handle SPF failures correctly?

[M. Hamzah Khan]

Hi,

I was wondering if you guys could share how you handle SPF failures?

Right now I am using SMF-SPF, and have RefuseFail on, so if SPF fails,
the message will be rejected instantly.

But doing this stops the message getting through to OpenDMARC, meaning
it won't be added to the history file.
This in turn means reports that go back to those who want them, won't
list those failures, which I presume, they should?

Setting RefuseFail off results in quite a lot more spam, so I was
wondering what you guys do?
Do you just reject it, and forget about the reports?

Or are you using some filter after OpenDMARC to handle it?

Regards

Hamzah

-- 
M. Hamzah Khan
Email: hamzah at hamzahkhan.com
URL: http://www.hamzahkhan.com
Telephone: +44 (0)2071006644
Mobile: +44 (0)7525663951