[opendmarc-users] SPF Whitelisting

[Marek Greško]

Hello,

I would need some advice on SPF whitelisting. The situation is that I use backup mx host which is out of my control and I cannot believe it is checking DKIM/DMARC by itself and I need to check it on the primary mx host. So I want to whitelist the backup mx's IP address to stop SPF failing when receiving messages through it to my primary mx host. But I do not want to use IgnoreHosts option since it will stop DKIM checking for messages received through the backup mx host.

Currently I overcome the problem by using smf-spf milter before opendkim and opendmarc to include spf checking header and let the opendmarc believe the header. But I would like to find the solution without using the smf-spf milter.

Is it possible?

How do you struggle such situations?

Thanks

Marek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.trusteddomain.org/pipermail/opendmarc-users/attachments/20220219/f0980b0e/attachment.htm>